We have Service Desk project and several users which can see this project on 'View all projects' page when they shouldn't see it.
These users don't belong to the project roles of this project and they don't have 'Browse Projects' permissions according to the permission helper.
Why can they view the project? Is this a bug or I miss something in configuration?
