Symptoms
User is unable to release worklist item from a custom worklist.
Diagnoses
An endpoints assembly smartobject is being used to perform this task but even with Impersonation set as the authentication mode, the user receives the following error:
24411 [K2 Service Account] from [IP] is not allowed to open the worklist item with SN=[SN]
Resolution
This was reproducible and was identified as a bug with impersonation in 4.6.7. This has already been resolved from 4.6.8 onwards.