tl;dr - new projects are being created with an unwanted user group assigned
we have an issue where new projects are being created with a group assigned to them. this is causing security issues as it permits unauthorised users access to projects!
I can't find default project settings anywhere.. does anyone know how I can remove this permission?