XF 1.5 user deletes own thread though permissions are denied

[Old Time RockenRoll]

A user was able to delete a thread even though the user group is denied.

This message by user1 has been removed from public view. Deleted by user1, Tuesday at 10:15 PM.

primary user group for this user is "registered", no secondary user group

"Registered" user group permission settings:
"Delete post by self: " set to "not set (no)"

 

[Martok]

Use Analyse permissions in the ACP on the user for both global and node permissions as it is likely that somewhere they have the permission to delete the thread.