Different profiles for the same authorization object

Hey,

How is it possible that in the same authorization object are different profiles generated with each other authorizations!

So in one profile it is only possible to display, but in the other profile it is possible to do everything, so it seems that the second profile is overrules the first one!!!

Regards,

Stefan