Running packages and security

We are currently running SAP BC 7.0 SP6.

The category dimension is secure and all users have access via a specific MAP. When we change the access to READ ONLY, users are still able to run Data Manager packages e.g. CLEAR, COPY and write records.

What should we look at to check why this is happening?

Thanks