Module entry in sidebar appears despite user roles

[allanaaa]

My audit of module behaviour shows this one appears in the sidebar even when a user role / site user role should not display it.
In this test, a Researcher role who has no permissions on the displayed site is able to see this:

DataScribe lets you browse projects but produces an error if you try to add a project. So I guess you want to remove that button; not clear on whether you want more user-based restrictions than that.