Have you done (in master)

SELECT * from sys.database_principals where principal_id = 17

yet, to find the name of the grantor? Then you could revoke the permissions from them. (Sorry if I'm teaching you to suck eggs :-D.)