No access to S_ALV_LAYO, can still change a layout
End user is executing transaction ME2S and is able to change layout. When I checked he does have access to authorization object S_ALV_LAYO. I did a system trace and the authorization object is checked, gets a return code of 12. This authrization object is not being loaded into the user buffer, also in the system trace screen the line with this auth object is light green instead of dark green like the rest.
Please check and suggest why this is happening and how this can be restricted.