I have a user named testuser;have a role called test rolehave a persmision called SalesPerson it does not allow read only

I have the test role DENIED for this permision.

I set the form view security key to this permission and the test user can still do anything he wants to the on the form. Here are some pictures.. I am not sure where I am going wrong.. Shouldn't be rocket science so most likely it is something stupid.