Description

If you create a user with edit-only user rights, they should not be able to perform delete or add actions. This is really an admin error, because users with edit permissions can delete posts, and in the case of FAQs, they can also add posts.

Proof of Concept

1.Create new user with edit only permission
2.Login to admin and you will see that add/delete option still available and