This allows you to say things like "Joe can access project A, B, and C but he can't see D." See the help of "Matrix-based security" for the concept of matrix-based security in general.
ACLs are additive, so the access rights granted below will be effective for all the projects.