Assign read only rights for a task to an user not to edit.
Task can be edited even though the permissions are restricted.
SMP 8.6.x +
The IIS TaskManagement virtual application had anonymous access enabled
Disable anonymous access on the Taskmanagement virtual application in IIS: