Control access to edit employee name through security

Content

I've created a copy of the Employee abstract role and removed (among other things) the duty role Manage Person Name (ORA_PER_PERSON_NAME_MAINTENANCE_DUTY), but retained View Person Name (ORA_PER_PERSON_NAME_VIEW_DUTY).  When I log in as the employee, I can still edit the name fields in ESS.  I've seen the posts about changing access to Edit through page composer changes; however, can this be accomplished through security?  Attached is an export of the role hierarchy and ESS screenshot. 

Thanks in advance for your assistance -

Erin