My users are bypassing browse rights somehow and I can't find out where this is configured.

Here is a folder with all rights shown. 

Yet for effective rights on the same folder with another user you can see that this user has Browse access.

I have made sure that Everyone has bypass browse unchecked, the user has bypass browse unchecked, and the only group the user is in has bypass browse unchecked. There is also no AD groups added to the system that could be applying this setting. Where else could bypass browse be configured?