All resources within a workspace are accessible by all members. This should not be the case if you really want segmentation. Not all developers need production access or access to all projects.