
A Social user does not have access to projects, including tasks within that project. They can only access floating "to-do" tasks not associated with a project. You would need a full user (or team user) with external user ticked. That would allow the user to see work that is explicitly shared but everything else would stay confidential.