I have restricted my user group to only one project.
When they browse projects they can only see the project they are restricted to.
However, when creating an issue, they can still see the full list of all projects in the dropdown. See screenshots below


I have checked all permissions and roles they seem to be restricted correctly.
Is there something I have missed in the permission scheme?
Create Issues under permission scheme is restricted to that group. So I don't understand whey they are seeing all projects on the Create Issue screen, but not on the browse project screen.