After talking to the other admin here, we figured out the problem. This person is part of a sub domain, so we had to restrict his access to certain things. Mystery solved!