I was happy to see that we can assign projects to individual users:
However, I was sad to see that it does not limit user visibility… I do not want users to log hours on projects that are not assigned to them. What is the correct way of limiting timesheet entries to projects assigned to the user?