The list is empty in default so every user profile from the account has got access to PROJECT in PLAY mode.
For access limitation to PROJECT for chosen users you have to add their profiles when editing the settings.
From this time PLAY mode will allow the access to PROJECT only these users.