Those extra permissions are based on how you have Facebook profile fields set to be imported into whatever profile system you're using on your site. For example, I see "cumpleanos" is being requested. To get the user's birthday, there is an extra permission required for user_birthday. That is not part of the 'approved by default' permissions from your first screen shot, so it's one that would need approval from Facebook to be imported from all your users.
Without that approval, no users will see the prompt for cumpleanos and since they won't see the permission (or approve it), their birthday will never be imported.
You can see the permission because you are the administrator of the Facebook App. No other users would see all the other additional permissions shown in that popup screenshot until approved by Facebook.
I hope that helps explain,
Alex