I'm having a problem- I have lead suppliers that I want them to see contacts and deals information but not be able to edit. So I went to the premissions and made a restriction, that they can only view the deal and contact which they own. Problem is, that when they look at the deal not in a table point of view but as a board, they can edit the deal's stage! (simply by dragging it to another section) This option may be good for employees but they are freelancers (Affiliates) and they only need to access the CRM to see what happend with the leads they brought me (as observers). Can I fix it somehow?
Have you made sure "they aren't being granted permissions for contacts or marketing" as well? (those are separate tabs)
Also, restricted access to deals is relatively new. What we're seeing could be an oversight on HubSpot's part that requires an additional (non-implemented) restriction.
Maybe test and report back here. We can always loop in the product dev team if we can't restict access sufficiently. The alternative is to reach out to support directly. What version of HubSpot are you using?