#4 Security error

[Anonymous]

any users can view other projects and iterations/tasks
even if they are not assigned by direct link changing.
like: http://localhost/ppts/...&IterationId=2&ProjectsId=2