diff --git a/apps/api/app/api/routes/generation_tasks.py b/apps/api/app/api/routes/generation_tasks.py
index 462b92beb..db2210c31 100644
--- a/apps/api/app/api/routes/generation_tasks.py
+++ b/apps/api/app/api/routes/generation_tasks.py
@@ -216,7 +216,10 @@ def retry_generation_task(
     task = generation_task_repository.get(task_id)
     if task is None:
         raise HTTPException(status_code=404, detail="Generation task not found")
-    if task.status != "failed":
+    if task.created_by_user_id and task.created_by_user_id != authenticated_user.user.id:
+        raise HTTPException(status_code=403, detail="Access denied to this task")
+    status_val = task.status.value if hasattr(task.status, "value") else str(task.status)
+    if status_val != "failed":
         raise HTTPException(status_code=409, detail="Only failed tasks can be retried")
 
     use_case = CreateGenerationTaskUseCase(generation_task_repository)
diff --git a/apps/api/app/api/routes/task_center.py b/apps/api/app/api/routes/task_center.py
index 1d2e9524d..e899c8500 100644
--- a/apps/api/app/api/routes/task_center.py
+++ b/apps/api/app/api/routes/task_center.py
@@ -134,6 +134,8 @@ def retry_task_by_id(
     task = generation_task_repository.get(task_id)
     if task is None:
         raise HTTPException(status_code=404, detail="Generation task not found")
+    if task.created_by_user_id and task.created_by_user_id != authenticated_user.user.id:
+        raise HTTPException(status_code=403, detail="Access denied to this task")
     if _status_value(task.status) != "failed":
         raise HTTPException(status_code=409, detail="Only failed tasks can be retried")