I encountered the same problem.

My first gut-feeling also led me down the road of looking where exactly this user still had some hidden permissions. However, the message should be...