Symptoms

User is unable to release worklist item from a custom worklist.
 

Diagnoses

An endpoints assembly smartobject is being used to perform this task but even with Impersonation set as the authentication mode, the user receives the following error:
24411 1K2 Service Account] from mIP] is not allowed to open the worklist item with SN=NSN]
 

Resolution

This was reproducible and was identified as a bug with impersonation in 4.6.7. This has already been resolved from 4.6.8 onwards.