what is grant for. If a user has nothing checked ,grant, or deny, than they have permissions right. so what is grant for if they can insert into a table without insert granted?
IF you have groups/roles (or even just have users created) set-up AND not everyone is in DBO arena THEN you need to GRANT permissions EXPLICITLY to be able to INSERT/UPDATE/DELETE.