I have a Workflow that is using an Approval Task. For the form, I edited using "Edit Task Form" and added some branding.
The problem is, even if UNASSIGNED users try to access the form, they can respond to the Task Form. For example, the Task has been assigned to UserA, UserB can open the task and do "Approve" response.
I checked permissions and they are only using "Contribute" permissions to the Workflow Tasks list.
I believe the correct behavior would be that Unassigned users cannot response to the Task Form.
Is this a bug? Or is there a way to fix this?