module ignore disabled "comment without approval" permissions for anonymous users

Does the comment permissions actually work? I have the following set up and it is not behaving as I expected.

1. I have a content type set up for which I have enabled Comment Permissions.
2. For Role x, I checked the box "comment on any content type x content"
3. For role x, I did not check the box "comment without approval on any content type x".

I expected that Role x would be able to comment but that the comments would go into moderation. However that is not what happens. Role x can comment and the comment is immediately published.

Am I missing something or is this a bug?

This module is not working for me either. I set the node type I want to allow to post anonymous comments on (blog only) and I do not see the comment link. Not knowing who's permission overrides who's (comment_perm or comment) I allowed anonymous to post comments from the core comment module and now all node types have comment links. This is not what I was expecting.

I think to give this module full control, you need to disable both 'post comments' and 'post comments without approval' permissions under Comment Module, then individually set them all as you wish under comment_perm module. As I understand it, non-core modules can only add permissions, not revoke them; in any case, this is what worked for me!