Does Profile permission override page layout settings?? A profile has CRED permission for an object and is assigned a page layout with read only permission on certain fields, still users with that profile are able to edit those fields..

I checked for it, they don't have that permission