You can do this in 2 ways..
1. Set the association between user and his tasks.
While showing the tasks retrieve by association.
2. Add an xpath level security for accessing the tasks. If the user himself creates tasks then say only read and write for owner to be given as the access rule.