I have a client and they want to restrict access for a group of users within the organisation to a specific component within a project.  These users should only be able to see issues relating to them in this component.  Seperating the component into it's own project would (as i understand gemini security) fix this; however doing so would create significant problems in the workflow and would only be considered as a last resort.

Is there a better way of handling this?  I'm still getting my head around the new security system.