Thanks Vladimir for the details,
The notes on how the order of assigned roles affects the access probably explains some of the results I have had.
If I understand correctly though. I can’t use “Block Not Selected” if I’m working with custom post types – as these are always edited with a URL similar to “wp-admin/post.php?post=nn&action=edit’. Is that correct?