What versions of the extensions are you using and what user rights config do you have? The users must be getting 'autoreview' rights from some group they belong to.
