We have a requirement in hand where we are want to assign a task to a parent group, but only allow certain sub-groups to accept the task and act on it.
For example, if a task gets Assigned to Parent Group, members of Sub-Group 2 and Sub-Group 3 should be able to see the task but only members of Sub-Group 1 should be able to Accept the task and edit/act on the task.
We gave Sub-Group 2 and Sub-Group 3 Deny access in Process model security, still if shared the URL of the task, they are able to accept it.
Discussion posts and replies are publicly visible