I've got a number of projects in an OnDemand instance 3 of which I want to limit the viewing of by one particular user. I've created a second permission scheme for 'external' and have applied that to the project I want to be viewable by this user. The 2nd permission scheme includes a user grouping called 'external' which I have added to particular functions.
However, as the user remains a member of the user group / project role "users" (which is used in global permissions to allow logging in/out etc they are still able to see all 4 projects.
How do I limit this one user to be able to see one project only (whilst still allowing them to log in)?