What permission setting would disallow a role from adding a value to a custom list via the + next the the list drop down on a record?