Restrict actions in TasksController based on permission and hide links