A user logs on to a project to the bug module and has to find in the "domain" field and the "project" field the list all his domains and projects for which he has for instance Project Manager rights. So if this user belongs to other projects but with other rights (for instance QATester) this project should not be listed.
I hope this is clear.