fix(kanban): disable task edit for non-assignees and enforce guard in edit action

Author: Diogo-Ferraz

src/app/features/projects/components/project-kanban/project-kanban.component.html

@@ -148,7 +148,7 @@ <h2>Project Kanban Board</h2>
                       <span class="task-card__title">{{ task.title }}</span>
                       <div class="task-card__header-actions">
                         <p-tag *ngIf="isTaskPending(task.id)" severity="info" value="Saving"></p-tag>
-                        <button pButton type="button" icon="pi pi-pencil" class="p-button-rounded p-button-text p-button-sm" [disabled]="isTaskPending(task.id)" (click)="openEditTask(task)"></button>
+                        <button pButton type="button" icon="pi pi-pencil" class="p-button-rounded p-button-text p-button-sm" [disabled]="isTaskPending(task.id) || !canEditTask(task)" (click)="openEditTask(task)"></button>
                         <button
                           pButton
                           type="button"

src/app/features/projects/components/project-kanban/project-kanban.component.ts

@@ -213,6 +213,10 @@ export class ProjectKanbanComponent implements OnInit, OnDestroy {
   }
 
   openEditTask(task: TaskItemDto): void {
+    if (!this.canEditTask(task) || this.isTaskPending(task.id)) {
+      return;
+    }
+
     this.editTaskId = task.id;
     this.taskForm = {
       title: task.title,
@@ -348,6 +352,10 @@ export class ProjectKanbanComponent implements OnInit, OnDestroy {
     return !!this.currentUserId && task.assignedUserId === this.currentUserId;
   }
 
+  canEditTask(task: TaskItemDto): boolean {
+    return this.canManageAllTasks || this.isAssignedToMe(task);
+  }
+
   canDeleteTask(task: TaskItemDto): boolean {
     return this.canManageAllTasks || this.isAssignedToMe(task);
   }