When an RBAC object in Pulp is set to assign perms on its creation it uses the AutoAddObjPermsMixin, typically the method add_roles_for_object_creator. This method finds the object creator by checking the current authenticated user. For objects that are created within a task this current user is set by the *first* user with *any* perms on the task object. This means the *oldest* user with model/domain-level  task perms will always be set to the current user of a task even if they didn't dispatch the task. Thus all objects created in tasks will have their permissions assigned to this oldest user, and the creating user will receive nothing.