How to stop staff creating Project Using Permissions?

I want to stop staff having the ability to make new projects or have access to activities. I have read through the manuals and I have done what I think I was meant to do but when I check the user's account, he is still allowed to create a New Project which I don't want him to do. This is what I have done.

1. I created a new profile specific to his account
2. I assigned the new profile to his user account
3. I create a New Access Code specific to how I want their read/create/update/delete rights
4. I then went into "Access to Forms" and I unticked the checkbox for his Profile
5. I went to "Access to Data (project dependant) and under his profile, I said No access
6. I went to "Access to Data "(not project dependant) and made read only for Categories of project and projects type

But yet the user can still open the Projects Page and Create a New Project. How do I stop this from happening. I only want him to be able to create activities and tickets in projects he is assigned to, but no make new projects.

Do not understand what you mean by upper rights and where would I do this?

Mean I cannot change permission now for him?