I have followed the guides for limiting access via permissions schemes. However, when testing, I find that any user I set up, even prior to assigning them to a project, can click on the setting cogwheel, then projects and see a list of all projects. I have looking in global permissions, but cannot seem to find anything that would be applicable to this problem.