I have two WordPress Multisite installations, a test environment and a live environment.
On the live environment i experience an issue that users registered to the network but not to a site the user still can access the dashboard and leave comments and create posts and add pages.
On the test environment everything works as it should be (or i think it should be) a user registered to the network can't access the dashboard of this site.
i've compared the wp-config.php and wp-settings.php files and the settings of both environments, but everything compares right.
What could it be that the live environment does let users access all sites.