#280 User can access nonauthorized projects and issues

[Stefan Larsson]

Configuration:
A user is granted all permissions for one single project, other nongranted projects exist.

Expected result:
user can see only the single project.

Observed result:
user can see all projects in list of projects, user can see issues of the nongranted projects. Editing/creating issues is not possible however.

[Marco]

This seems to work, need more detailed instructions?