diff --git a/pillar/application/modules/projects.py b/pillar/application/modules/projects.py
index 7a4248b5..3677af34 100644
--- a/pillar/application/modules/projects.py
+++ b/pillar/application/modules/projects.py
@@ -40,13 +40,11 @@ def override_is_private_field(project, original):
     :param project: the project, which will be updated
     """
 
+    # No permissions, no access.
     if 'permissions' not in project:
-        project['is_private'] = False
+        project['is_private'] = True
         return
 
-    world_perms = project['permissions'].get('world', [])
-    project['is_private'] = 'GET' not in world_perms
-
 
 def before_inserting_override_is_private_field(projects):
     for project in projects: