In advanced security mode, all users inherit from the default user. This "user" isn't really a user in that it cannot be created, disabled or deleted - instead it serves as a dynamic template that every user gets rights from. Changing the default user's rights affects all users without your having to edit individual user's rights directly.