Solaris

So I have 2 projects (proj1 and proj2) and 2 users (usr1 and usr2). Entries in /etc/project and /etc/user_attr to assign usr1 to proj1 (collectively the app) and usr2 to proj2 (collectively the db). All looks just great, but I see process that are owned by usr2, but have a projid from proj1. usr1 has no rights to that project as dictated by /etc/user_attr and has not even been assigned to that project as seen in /etc/project. So how can this happen?

Granted yes, the app makes connections to the db to do work, but these are DB processes in the app's project. And yes, I can use newtask to reassign them back to their correct project, but if this is going to happen a lot, it sounds like something might be wrong, no?

Any ideas what to look at and how this might have happened?

TIA.