I did not realize site and project users mixed together like that. every project user is also a site user - i was assuming project user meant they were specific to that project. i think we need to change some things in how our site is configured...