How to setup permissions of AWM apps and child pages?

I can properly setup permissions for every page I create, except AWM creates apps… which are most of the pages I have on my Wiki.

I am explicitly telling users from XWikiAllGroup can´t Administer the AWM main page nor child pages.

and yet


Note: You don’t need to do that. It’s denied by default if not explicity enabled. See https://www.xwiki.org/xwiki/bin/view/Documentation/AdminGuide/Access%20Rights/#HBasicrules

Just tested locally (on XWiki 16.5.0) and if I use a user that is not part of the admin group, it doesn’t have the option to administer a page. Also, I don’t think this is related to AWM apps.

Example:

I am on 16.4

Do you need to see some other screenshot to help pinpoint what is the issue? Everybody I looked seems to show the pages should be blocked for the user.

The user I am testing the login with is at XWikiAllGroup and I checked and he is not at the XWikiAdminGroup.

As for the Global Permissions
strong text


So I just have no idea where the user is getting the permission to administer those pages.

EDIT: ok, I found the problem… for some reason that 2nd user I was using had User right to Administration at the apps.

is there a place or way where I can audit user level permissions at all pages?