I have created a user mailbox that will be designated for department calendar items (We are trying to get rid of Exchange public folders).  I added the department's AD security group to have access to that calendar with Reviewer permissions.  When I add my test account to that group and attach the calendar to my Outlook client, I still have the ability to create calendar items as a "Reviewer".

I took it one step further and removed myself from the group and explicitly added my account to the calendar with Reviewer permissions and I can still create items.  I can't delete my own items, but I can create them.  I can replicate this in Outlook 2010 and 2013.  Has anybody else seen this issue and if so, what did you do to resolve it?  I appreciate any info you can provide.

--Scott

• Edited by slrobb 11 hours 29 minutes ago additional details added

I have validated permissions throughout and all looks good.  If I change the permissions to Free/Busy time, subject, location, then I can't even read the calendar, but if I change it to reviewer, its almost as if I am assigning myself Contributor permissions.  The test account I am using is only a part of the Domain Users group.  I checked the new department mailbox and there are no inherited users/groups that contain my test account. 

Any ideas?

--Scott