rights checks on taskActions