Security In Projects

Hi Frns,

Need a help on security options in projects:

If i enforce role based security with limited menu/functions and assign that role to a project and access that project from a responsibility which has all project menu/functions available and the responsibility updated with the profile option "PA: Cross–Project User – Update: as YES.

 The role is still able to access all the menu/functions. Is this intended or i am missing something here.

Please advise.

Thanks,

Shiv