Also, I have given this technician access to report module (Custom Report Builder) that he can get reports from his own projects. But unfortunately, when he create a report, he can also see all his unrelated projects.

This is not acceptable at all from a security point of view.  I think it's a bug. Please fix this issue.

Thanks