Why does the ACFRPTXR report is listing users that have don't have access?
The ACFRPTXR report goes over each rule line in a rule. If you have a rule line with PREVENT, then you will get a list of users that match that PREVENT rule, either by UID string or other ways, like NON-CNCL.