How to prevent actionable access in My Staff Tasks in BPM

Is there a way to prevent tasks from being acted upon through My Staff Tasks? We recently had a scenario where a user was able to approve an internal supplier change through the My Staff Tasks area in BPM (task was assigned to one of their direct reports), despite not having supplier management privileges.

Ideally, the manager would only be able to act on tasks for which they themselves have associated privileges.