Some notes on aclStrictMode. It was removed in this upstream issue.
Checking
Check /app/data/data/config.php in the File manager and search for aclStrictMode. If it's set to false, it means it's disabled and you must migrate to using proper access control/roles in Espo.
Roughly, you can do this as follows:
Administration -> Roles. Create a role called say users and give it all permissions. Ours is configure like this:
2385a68b-1314-4940-af85-e51e844ffdfc-image.png
Administration -> Teams. Create a team called everyone and then give the users role. You can also add users into the team in the Teams page.
e96825bf-c56a-4852-bf76-2381e29302d3-image.png
You can also auto-assign teams to a new LDAP user. Administration -> Authentication.
a97abfcb-c1d5-428d-a60e-56b272a9355d-image.png
Remove the aclStrictMode field in /app/data/config/config.php
Restart the app and check if it all works.