I use DNN Platform 8.01 and created page and install a sample customized module in the page. I set the module permission to only view to test user.  but the module content can still be edited and saved by the user.  Even I set the permission of the "Edit module" to deny, the user still can edit the module content.

The page permission also shows the same problem, the permission for "edit" not function.

Great appreciation if anyone knows the reason and solution.  Thanks.

I downloaded the adjustment sql (AdjustDNNPermission742) and run it successfully, and then I restarted the 

DB and website,  but the problem still exists.

I checked the portal table, but it seems there is no change after I run the sql,  and there is still only one record

in this table. it is as below:

Below is how my module was coded:Permission for "View" works fine both in page and module, but "Edit" still not working.

 -- Get the data from my customized DB tables ( all the customized tables are in the same DB as DNN table)

    and display the information in the page;

-- Modify the information;

-- Save the modified information into the customized DB table.

  ( on doing the saving,  I used ajax in the save button click event).

My understanding is as below: 

 if we disable the "Edit Module" in this module permission for a user, then this user 

shouldn't be able to change and save the above information.

Thanks again and looking forwards to your further instruction.