For this very reason is why I asked about 10 years ago with ver 7 that we need some type of visual global permission management tool.
It can get very convoluted and very easy to loose track of who can do what and where.
I have helped many members in the past to fix permissions that were not entered correctly for the desired effect, and it can be very time consuming to find and correct
Especially with the -1.