Client can edit tasks

I made myself a client with a different email and I can edit tasks under an external milestone. It looks as though I can edit unassigned tasks but I cannot edit assigned tasks to other people. Also I can add tasks and subtasks. Is this normal? I do not want the client to be able to edit any task they did not create. Please advise. I also have submitted this problem via email but have not heard back.