got it . If i call taskService.complete() , i see the user task is getting completed and moves along the workflow. But i didn't use identity service or any kind of login to complete user task . As per the process definition , user task is assigned for candidate group , from api if i call complete , how does the activiti BPM ensures the actual member of candidate group has completed the task ?