Symptoms: 
On the Projects page of the Legacy interface, in the View list, certain users can select projects for clients I am a member of, even though their corresponding user type does not have the "Can view projects of clients the user is a member of" permission. As a result, those users can view all the projects for their clients - even the projects with other locales than the ones assigned to them. 

Resolution: 
You can fix this issue by deploying the update to WorldServer 11.1.1, available on FTP.

If you cannot deploy it, connect to the Customer Support Web Portal and log a case. You need an account to log a case. If you do not have an account, contact your company's SDL Support Account Administrator.