Assigning a task to someone else requires the tasks:assign permission. Without it, a user with tasks:edit_own may only assign an unassigned task in their own user group (or in none) to themselves, keeping its group unchanged. A task the caller cannot see returns 404.