Users have permission to specific projects based on their account type (Owner, Manager, Evaluator). Your project is not accessible by anyone who does not have an explicit account on the project. What you can do and see in your project is dependent on the account type.
Account access levels are specific to each project, hence different users can have different account types (Owner, Manager, Evaluator) for different projects.