I have a sub-site called Operations from where I have revoked access for one of the users so ideally he should not be able to access the site at all. For some reason, after checking on the user's end, he is still able to access the site. This is something we are testing in a test site collection in production for one of the implementations and I am not sure why user is still able to access the site.
Does anyone know where these explicit permissions are coming from called "Allow", I guess because of this user is still able to access the site.
Can someone please suggest a solution how can I solve this and make sure user can't access the site, any help is appreciated, thank you in advance.