I created a new app and set it up so that only two roles 'System Administrator' and 'System Customization' have access to it. However, I've noticed that a user with the 'Salesperson' role, but without the 'System Administrator' or 'System Customization' roles also has access to the app. When I remove the 'Salesperson' role from a user, he lose access to the app. Conversely, when I assign him the 'Salesperson' role, they gain access. Attached is a screenshot showing the permissions and the result from AppAccessChecker. Settings result from AppAccessChecker
I tried republishing the app, but nothing changed.