The PPPProjectUser role had access to availability records of other resources.

This bug has been fixed: Permissions on the Availability table (tpg_availability) were changed from Organization to User to restrict access appropriately.