We have an issue that some of the sc_task records are being created under "system", instead of the user go submitted the request. Most of the catalog items are running with workflows still, but the ones that do use flows I have confirmed that the property "run as" is set to "user who initiates session". However this issue happens to sc_task records created both from flows and workflows.
