Problem

If the current user is pm (no admin role), according to the acl, he is able to see the task log component in the task properties panel. The component will try to load the events store (get request to task/events action) and as response 401 (unauthorized) is returned.

Solution

Add the missing acl role for task/events action so the pm users are able to load and see the task log.