Proper way to limit specific projects to specific users

General Discussion
4

I try to always apply permissions to roles/groups not individuals.