No access to submit but can submit (security/permission error)

This particular user/role can submit which should not be

The user’s role is only student

Student Role has no access to submit

How could this happen?