We've been doing further investigation into this. Our code seems to be handling things properly in most cases. We're still unsure where things get out of sync. Simply saving (or deleting and recreating) the channel should work to remove the erroneous publish_actions permission. We are working on an update that will auto-upgrade permissions if they are old, but I don't think that would fix the cases above because they are out of sync some other way that we'd like be able to automatically detect.
Have you tried the steps above for deleting channel and the user-mapping in JFBConnect and then recreating the channel? Again, deleting the user-mapping will not delete the Joomla user. You'll just need to re-authenticate with Facebook again and it should automatically recreate that mapping to your existing Joomla user (if the emails match or you use the Reconnect feature in the SCLogin module while you're already logged into Joomla). That new user-mapping will have a clean slate of permissions and shouldn't have the publish_actions problem.
Then, when you create the new channel, it will request only the correct permissions based on the JFBConnect v8.0 update.
Please let me know if somehow deleting the usermapping and recreating it still has the issue, because that would indicate there's something unrelated to channels or the specific user that is causing the problem. That would help us investigate further because, as I mentioned, we can't fully understand how that permission is still being requested if you deleted or re-saved the channel.
Thanks,
Alex