current_user_can() returning true for capability when the user and role do not have the capability

current_user_can() returning true for capability when the user and role do not have the capability