Are you checking individual user permissions? Go into ACP, go down to permissions, then user permissions. Look to see if that specific user has any specific permissions set. They will be in that list if there is. You can also use analyze permissions option to see what setting needs to be...