Add the ability to set permissions per task type, for example, only the role "manager" can open "big tasks", while others cannot open such but can open "sub tasks".