Missing “not” in notes for role/permission logic

This sentence confused me for a while. I’m pretty sure this is how it’s supposed to read.