accessing a task with url

Hi,
I’ve written a small app with two tasks, assigning both to ane actor.
After starting the app and the first task I’ve noticed tha opening the second task with the url:

http://xxx.xxx.xxx.xxx:8080/bonita/portal/homepage#?id=360093&_p=performTask&_pf=1

I can perform the task with any user I log in and not only with the one I configured.
Is it a bug ?

My Bonitasoft version is 6.3.2

I understand tha this is a bug of version 6.3.2 as said in post:

http://community.bonitasoft.com/answers/all-users-can-do-all-tasks-security-bug

I understand that this is a bug in version 6.3.2 as said in post

http://community.bonitasoft.com/answers/all-users-can-do-all-tasks-security-bug

Yes this is a bug with version 6.3.2 :
http://community.bonitasoft.com/answers/all-users-can-do-all-tasks-security-bug