If you take a look at operations-dsl.mvel file, you will notice that actual owner is allowed to perform Activate operation. It does not make sense since a task can only be activated when it is in Created state (see Task Lifecycle) and in this state it does not have any actual owner. This permission should be removed from Activate operation.