How can I make sure Service Desk customers can't see non-Service Desk projects?

Question

I added external users as Service Desk customers, after they entered a couple requests they were able to go to the Projects tab and see non-service desk projects. Do I need to add security to my non-service desk projects? How do I do this? I was very surprised.

Nicole Pletka · Answer

I figured it out. There was a default Browse Project permission set at the Application Access level to all logged in users. Once i removed that everything was ok.