Removing List Permissions Does Not Remove Other Permissions

Problem:

When giving a user or group Publish, Modify, Delete, or Change Release State permissions, they are automatically given List and Read permissions as well. This is the correct behaviour.

However, if you remove the List permission, the other permissions are not automatically removed.

Workaround:

If you are reducing a user or group's permissions, be sure you remove any associated or inherited permissions as well.

Status

Known issue - not yet scheduled for development.