I've already tried several different setups, but neither works.
See the attached screenshots.
What do you want to achieve? show the entire pages tree but only allow editing on the pages you granted permissions on?
Plugins permission is independent from the page ones.
You must explicitly grant permission on every plugin you want your restricted users to edit.
Closing because no further information is available and this doesn't seem to be an issue generally.