1. Yes, but it's not limiting the user. You need to limit everyone, and then selectively allow access back. Once you've that up, you need to enable the "reporter browse" permission. See https://confluence.atlassian.com/display/JIRA/Current+Reporter+Browse+Project+Permission - problem though - I don't know if that's possible with OnDemand.
2. No, you either have Greenhopper or you don't, there's no granular control over who can see it
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG