If we set System>>Persons>>Start Access level=Full access and in the Access group we turn off access to all modules (First column=Module, second column-empty, third=none), the user can see all the modules.
Is it a bug?

I cannot allow the user to run the report Purchase Ledger>>Registers>>Purchase order contract>>Operations menu>>Contract status, because this report is missing from the List of available reports in the Access groups setting.
Does this mean reports list contains only those reports which are in the Reports list?