PMP Access Permissions

I have setup a Resource group and given a user group manage permission. I then setup a resource, and did not specify any other permissions. When I created an indiviidual account under the resource, I specified that the user group have view only permission. I am still able to change the passowrd.

According to this note in the user guide on share permissions

Precedence for Share Permissions: The share permission ('view' or 'view & modify') set for a password overrides that of its resource, which in turn overrides that of the resource groups which the resource is part of. (Lowest level takes highest precedence). Similarly, the share permission provided to an user overrides that of a user group the user is part of.

I expected that the lowest level being the account of the resource to take precedence and the users in that group to only be able to view that particular password.

My version is 6.4.1 build 6404 running in Linux.

Thanks,

Terry