When I (administrator account) edit the capabilities on any user, it shows a checkbox next to each capability of theirs that is off. I can check that checkbox to turn on that capability for them. So far, that’s normal.
But, for capabilities that are active for them, it shows a faded-blue checkmark and I can’t click on it to turn it off. Is there a setting that’s causing this? How come I can’t uncheck any capabilities, is there a solution?
URE works this way by design. You can revoke from a user only those capabilities which granted to him directly. Capability granted via a role, can be revoked this way:
1) revoke from user that role
2) revoke that capability from that role.