Make projects only visible to users with permission to see them
Don’t show projects that a user doesn't have permission to see
Restrict reading tickets to correct project scope