We have one specific object type in our object schema that we do not want any users besides Admins to be able to create new objects in. For that object type (Class), I have set up Roles: 
However, when I had a non-admin go in to validate that they could no longer create new objects on that object type, they were still able to. Any ideas as to why they still have that ability? Thanks!