Jilly10 -
You might want to check Site Owners group to see a list of members. It's possible that when the site was initially set up that someone may have added "NTAuthority\Authenticated Users" to that group. If this is the case, then everyone will have all permissions.
Open a browser to the site in question:
Click Site Actions
Click Site Settings
Click People and Groups
From the left navigation select the Site Owners group
Now check the members of that group.
I hope this helps.
Take care,
Scott