Role based security - How it works ?

 I confused with the figure Security Check Example, page 13-11 Project Fundamentials user guide, step 7

The system checks whether the user has appropriate function security through the user's assigned responsibility. • If the user has appropriate function security, the user can perform the action. • If the user does not have the appropriate function security, the user cannot perform the action. • If the user does not have the appropriate function security, the user cannot perform the action. So, if user has restricted role in Project super user resp (with assigned project manager role menu) - he can access ALL function !

Because all functions exists in responsibility. So, role