Got OAuth resource based permissions working. Scopes like tasks:write, tasks:read for fine grained API access!