Enterprise role mapped to Project Roles Affecting Project Access/Updates

Summary:

We have a requirement where custom Project roles (Eg: 'Cost Analyst') are setup to allow for individuals to perform Project specific tasks like updating attributes, status etc. We have mapped the custom project role (Cost Analyst) to a custom enterprise role (having project creation access) using the Manage Project Role task.

Problem Statement: Whenever a Cost Analyst is assigned to a project using Manage Project Resources page, the individual is able to perform all the tasks (Update attributes, perform maintenance activity) for that project. This is working as intended. But this ability is not restricted to this particular project. The individual is able to access/update all the projects in the application even if the person is not a 'Cost Analyst' resource for those projects. This is not working as per expectation.