JBPM-4360: Fine-grained access control for process instances