The the project level Risk,issues,change request comes in the same package.
If you remove the view rights for these non of these will appear at the project.
I think want to hide only CR's and not risk/issues.
Project - Risk, Issue, Change Request - Create/Edit Allows user to create and edit risks, issues, and changes for a project instance.
Project - Risk, Issue, Change Request - Delete Allows user to delete risks, issues, and changes for a project or program instance on which they are a staffed.
Project - Risk, Issue, Change Request - View Allows user to view risks, issues, and changes for a project instance.