SYMPTOM:
The administrator notices that some of the Strategy users have administrator privileges although they are not granted with related privileges in the User Editor in Strategy Developer 9.4.x -10.x. For example, a Guest user in Strategy have access to all the project and is able to use metric editor. However, the "use metric editor" privilege is not granted to the Guest user in the User Editor.
When they login with the Strategy user to a project source, it can be observed that the user has "Bypass" status, as shown below:

CAUSE:
One possible cause for this issue is that the "Bypass" privilege is granted to the group where the user belongs to by mistake in the User Manager. For more information about the "Bypass" status, please refer to the technical note below:
KB17729: What is the meaning of the word ’Bypass’ that appears in the bottom right corner of the MicroStrategy Developer 9.4.x - 10.x window after the login ID?
ACTION:
Check the privilege settings for the Strategy user, the User Group the user belongs to and the "Everyone" group in the User Manager. If the user is not designed to be granted with administrator privilege, make sure the "Bypass all object security access checks" privilege is not checked as in the picture below:

If the "Bypass all object security access checks" privilege is checked in the user editor, "Everyone" Group, or the Group the user is belong to by mistake, uncheck it to solve the issue.