Jenkins Role-based Authorization Strategy Plugin 587.v2872c41fa_e51 and previous versions grants permissions even after they've been disabled.
jenkins role-based authorization strategy