I have removed disabled the permissions, and yet the wishlist button still shows up on some products in the category view randomly.
It was a bug for only group Products. But fixed for upcoming version ==>https://www.nopcommerce.com/boards/t/40858/wishlist-buttons-and-acl-on-grouped-products.aspx#163237