ProcessRuntime - Access to a process instance should be limited to initiator and task involved users (i.e. a task assignee or candidate) - Actions on a process instance using ProcessRuntime should be limited to process initiator