How can I make sure Service Desk customers can't see non-Service Desk projects?

[Nicole Pletka]

I added external users as Service Desk customers, after they entered a couple requests they were able to go to the Projects tab and see non-service desk projects. Do I need to add security to my non-service desk projects? How do I do this? I was very surprised. 

[Nicole Pletka]

I figured it out. There was a default Browse Project permission set at the Application Access level to all logged in users. Once i removed that everything was ok.