docs: protected void configureVariableInstanceQuery(VariableInstanceQueryImpl query) {
      configureQuery(query);
  
      if(query.getAuthCheck().isAuthorizationCheckEnabled()) {
  
        CompositePermissionCheck permissionCheck;
        if (isEnsureSpecificVariablePermission()) {
          permissionCheck = new PermissionCheckBuilder()
              .disjunctive()
              .atomicCheck(PROCESS_DEFINITION, "PROCDEF.KEY_", READ_INSTANCE_VARIABLE)
              .atomicCheck(TASK, "RES.TASK_ID_", READ_VARIABLE)
              .build();
        } else {
          permissionCheck = new PermissionCheckBuilder()
                .disjunctive()
                .atomicCheck(PROCESS_INSTANCE, "RES.PROC_INST_ID_", READ)
                .atomicCheck(PROCESS_DEFINITION, "PROCDEF.KEY_", READ_INSTANCE)
                .atomicCheck(TASK, "RES.TASK_ID_", READ)
                .build();
        }
          addPermissionCheck(query.getAuthCheck(), permissionCheck);
      }
    }