Fix for ACT-954

modules/activiti-webapp-rest2/src/main/java/org/activiti/rest/api/SecuredResource.java

@@ -42,6 +42,7 @@ public class SecuredResource extends ServerResource {
       return false;
     
     } else if(group == null) {
+      ActivitiUtil.getIdentityService().setAuthenticatedUserId(loggedInUser);
       return true;
     
     } else {
@@ -51,6 +52,7 @@ public class SecuredResource extends ServerResource {
         for (Group groupObject : groupList) {
           if(groupObject.getId().equals(group)) {
             allowed = true;
+            ActivitiUtil.getIdentityService().setAuthenticatedUserId(loggedInUser);
             break;
           }
         }

modules/activiti-webapp-rest2/src/main/java/org/activiti/rest/api/process/StartProcessInstanceResource.java

@@ -59,7 +59,6 @@ public class StartProcessInstanceResource extends SecuredResource {
       variables.remove("processDefinitionKey");
       variables.remove("businessKey");
       
-      ActivitiUtil.getIdentityService().setAuthenticatedUserId(loggedInUser);
       ProcessInstance processInstance = null;
       if (processDefinitionKey != null) {
         processInstance = ActivitiUtil.getRuntimeService().startProcessInstanceByKey(processDefinitionKey, businessKey, variables);