prowler/api/changelog.d/task-revoke-permissions.security.md

DELETE /api/v1/tasks/{id} requires the permission of the operation that queued the task and rejects provider deletions, and GET /api/v1/tasks hides tasks of providers outside the visibility of the role