What is the default access control configuration?
Accepted answer
What you've observed is correct. In both 3.0.1 and 4.0, the default visibility in RTC and LPA are different. The default visibility *should* be "members of the hierarchy", but LPA is following the old RTC 2.0 convention.
I wasn't aware of this issue until I just read your question. We'll try to get this fixed in LPA for the next 4.x releases.
You can track the issue here: 167146: Everyone can see the the project area that created from LPA
I wasn't aware of this issue until I just read your question. We'll try to get this fixed in LPA for the next 4.x releases.
You can track the issue here: 167146: Everyone can see the the project area that created from LPA