How to restrict Project Expenditure Organizations in Projects and AP responsibilities

Hi All,

We have a project hierarchy wherein multiple operating units and Company Cost Centres are included. All these orgs are also defined as Project Expenditure/Event Organization and Project Task Owning Organization. The hierarchy includes below

OU1, OU2, OU3

CCC1,CCC2,CCC3, CCC4, CCC5

For a particular AP and Project responsibility, we want only following be visible and available for transactions-

OU1

CCC1, CCC3, CCC5

We have created a security profile which include these organizations and assigned this value against MO: Security Profile for AP and Project responsibility. However, at the time of transaction, user can still view/use OU2, OU3, CCC2 and CCC4.