Permission checks in the TaskResource which require the projectID are now supplied the appropriate "*" for tasks which have no project (getProject() == null).