Users and secure projects. JOSM API. If the user is not in a project, they will not get tags for that project. They will not be able to create tags, and will not be able to update tags via the API.