This will be hard to find the users with hidden client permissions.
You need to select each user (is impossible, if you don't know who they are) and choose the menu point "Client permissions".
You better reset all permissions and make them unable to add permissions again.
See post #3 or #7 for more details