Currently if you create a user and add it to a reader group they, by default, can still see everything in the project.
you must manually on each reader user set documentation scope to NONE.
this makes little sense.
it would be nice to set a default documentation scope for all new users.