1. Go to Maintenance | Security Settings | User Maintenance | highlight the stat user
2. Double click on the user | go to object type access tab and make sure the right hand pane is blank for access for selected user. Ideally it should be blank. If not, then that's mean the user only have access to the object types that is listed on the right hand pane.