I have created a custom role called Contractor. I’ve assigned this role access to the Project and Task doctypes, and a few others. As an afterthought, I created an Employee record for my Contractor user, to take advantage of some of the payroll functionality. After I did this, I saw that my Contractor had access to the same doctypes that a user with the Employee role would have access to, but I only created a record, that is, I did not assign the Employee role to my user.
How are all these doctypes getting assigned and how can I stop this from happening?