[ccnet-user] security setting in cc.net 1.5

[Edwin]

I have a problem in set up security.I use rolepremission in my
ccnet.config and ldap users.
I found I can see all projects in cc.net 1.5 when I didn't login.but I
can't see any projects after I login.what happend to me?
Q1:what is defaultProjectSecurity,May I change it?
Q2:How to prevent other users in ccnet.config see the project security
setting without them
My setting seems changes
my setting just like below.
<users>
  <ldapUser name="EdwinTai" domain="xxx.com"/>
</users>

<rolePermission name="Admin" defaultRight="Allow">
  <users>
  </users>
</rolePermission>

<project>
  ...
<security type="defaultProjectSecurity" defaultRight="Deny">
   <permissions>
      <rolePermission name="Admin" ref="Admin"/>
    </permissions>
</security>
</project>