How to give solr user permissions per collection - solr

Question

Here is the security.json file I generated:
{
"authentication":{
"blockUnknown":true,
"class":"solr.BasicAuthPlugin",
"credentials":{
"solr":"IV0EHq1OnNrj6gvRCwvFwTrZ1+z1oBbnQdiVC3otuq0= Ndd7LKvVBAaZIF0QAVi1ekCfAJXr1GGfLtRUXhgrF8c=",
"project-1":"QUYURq8j9DfpPWo8X9lEhIdNzW/BZUCabISt4C9NSdo= +QBNDGAaKrzYb2tCoKw6YBvZvs40ikPiyeX7kp4foGw=",
"project-2":"LskXmhFtq0Gy2ECt2OjcNDSSAKdMXSOm6kpfGwVXGq4= 0vCTvHC7RYu3sLyEXlfy+xwdmMBRSDlqECP7UeVkFuQ="
}
},
"authorization":{
"class":"solr.RuleBasedAuthorizationPlugin",
"permissions":[
{
"collection":"project-1-collection-1",
"name": "all",
"role":"project-1"
},
{
"name":"all",
"role":"admin"
}
],
"user-role":{
"solr":["admin"],
"project-1":["project-1"]
}
}
}
I would expect that from this configuration:
solr user is the administrator and have access everywhere
project-1 user has only access to project-1-collection-1
project-2 user has no access to anything
But the actual effect is different:
solr user has access everywhere ✓
project-1 user has access to api, but does not have access to GUI of collection-1 ❌
project-2 user has access to collection-1 (it should not) ❌
I am checking the API by running
curl --user "solr:SolrRocks" "http://${HOST}:${PORT}/solr/project-1-collection-1/select?wt=json&q=*:*"
curl --user "project-1:password-1" "http://${HOST}:${PORT}/solr/project-1-collection-1/select?wt=json&q=*:*"
curl --user "project-2:password-1" "http://${HOST}:${PORT}/solr/project-1-collection-1/select?wt=json&q=*:*"
And GUI by accessing following url:
http://localhost:8906/solr/#/project-1-collection-1/query
What am I doing wrong?