I’ve got similar problem with comments. Apparently, when you grant access to “Edit posts” you can also view and edit user comments in WordPress despite having also “Manage comments” on “Deny”.
Or in another words “Manage comments” rule does not apply.
