feat: add modal-edit permissions for projects milestones and tasks

app/api/routers/tasks.py

@@ -14,7 +14,7 @@ from app.schemas import schemas
 from app.services.webhook import fire_webhooks_sync
 from app.models.notification import Notification as NotificationModel
 from app.api.deps import get_current_user_or_apikey
-from app.api.rbac import check_project_role
+from app.api.rbac import check_project_role, ensure_can_edit_task
 from app.services.activity import log_activity
 
 router = APIRouter(tags=["Tasks"])
@@ -162,7 +162,7 @@ def update_task(task_id: int, task_update: schemas.TaskUpdate, db: Session = Dep
     task = db.query(Task).filter(Task.id == task_id).first()
     if not task:
         raise HTTPException(status_code=404, detail="Task not found")
-    check_project_role(db, current_user.id, task.project_id, min_role="dev")
+    ensure_can_edit_task(db, current_user.id, task)
     
     update_data = task_update.model_dump(exclude_unset=True)
     if "status" in update_data: