When removing permissions for a user (ACL) using the webservices it removes the user from the list on the UI completely. When i did the same with REST, it seems to leave the user listed in the ACL list (with no permissions to the object). SO the differences is that the name of the user is still in the ACL list of the object, but they have no permissions ( as all checkboxes, ie: see/seecontent are removed )