SharePoint 2016

Question

Hello.

For some reason, we are left with exposed Sharepoint 2016 portal management access links and configuration lists.

We checked the accesses and you only have one user group with full control. Still, by putting the direct access url to the list or page, anyone can view it.

 We had to run scritp to block access.

 Is there an action that might be triggering the exposure of private content?

 Another situation, is anonymous content (e.g. document library) that started asking for credentials to access.

We had to run a script to allow anonymous access.

 There were no changes to the permissions model, so I think it may be something that is running on the server and causing this situation.

 Any ideas?

Thanks.