Customer able to override gate hours using EasyCode

We  have all hours set properly in all of our software.  Gate access is closed down after 10pm.  However, we have noticed one particular user has been able to get in using easycode at all hours.  He seems to have 24 hour access and this is NOT set up as 24 hour access.  I've updated gates and triple checked everything from sitelink to storlogix and everything is fine.  What is going on and how do I fix it?  No where on this users info does it show 24 hour access.  It all says 'Standard business hours'.  No one else seems to be able to do this.  How is he making this happen and how do I stop it?

PTI and Sitelink are rife with security failures and glitches but this is pretty glaring.