That's a good question. I assumed that a user would only be able to do that to tasks/projects that were created or assigned to them. To my surprise, I found that you can do whatever you want! A field to show who made tasks/projects and who they are assigned to would allow checking this when someone goes to modify one.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
IPM is a good application for me but why a general user can finish and delete ANY task/project?
That's a good question. I assumed that a user would only be able to do that to tasks/projects that were created or assigned to them. To my surprise, I found that you can do whatever you want! A field to show who made tasks/projects and who they are assigned to would allow checking this when someone goes to modify one.