You should keep all projects configured as Public (see Project access control), otherwise the site-wide permissions provided by membership in the Users and Reviewers groups won’t have any effect. You may also grant some additional permissions of your choice to the default groups.