Here is the situation, it involves roles that depend on two different permissions such as moderator. Oxwall still ties standard (free) permissions to those that have other roles as well.
So this means that a moderator is still tied to standard permisions. In my test i discovered the following.
Standard permissions VRS Mod permission
both off = mod or standard not auth - correct
Here lies the issue:
standard ON and Mod OFF = mod is still auth because standard is on and they are tied to standard - here is where oxwall goofed - they didnt set up the process to check this situation - wrong
standard OFF and Mod ON = mod is still auth because mod is checked which counters the unchecked of standard - correct
Thanks
Dave :)