Client able to request in any stage

Not sure if im doing something wrong or there’s a bug, but for some reason a client can request tasks in any stage and also move them freely? i’ve selected the option to stop clients from doing this but they are still able too?