Not an issue

Because tester2 have the right to update ANY survey : then the right to activate any survey.

Permission come from Global Permission not from Survey Permission

But need a "partially checked" box like we have in 2.6lts

even if I remove the right for updating any survey for the users 'tester2' and 'tester3' the user 'tester' can grant activation rights to 'tester3'.

maybe my thinking is wrong.
what permissions settings are needed for this scenario:
tester1 should be allowed to do everything except plugins and modifying themes (so he can not be a superadmin)
he should create users like tester2, who is not allowed to create, delete or activate surveys. But this user should be able to edit surveys assigned to him (add,change, delete questiongroups and questions)
tester2 also should be able to create further users (tester3) which can work the same on assigned surveys as tester2
(only tester1 should be able to activate any surveys)

Right : issue still persist with deactivating update (all) surveys for user2

For reminder for checkbox state with 2.6lts version :
1 state

• checked : set in this survey
• indeterminate: set by global (but not set here)
• unchecked : no right

Capture d’écran du 2019-02-20 14-08-43.png (35,006 bytes)   

Capture d’écran du 2019-02-20 14-08-43.png (35,006 bytes)   

Louis quit mantis

I think there are way where user can remove Permission too.

Need to be tested but :
SuperAdmin give all rights on a Survey#1 to User#1
SuperAdmin give read response rights on a Survey#1 to User#2 + Set permission (for example to allow create some user to read response)

Log in as User#1 : user#1 can remove (without wanting) rights to User#1. My opinion : he must be allowed to update ONLY read response rights.

https://github.com/LimeSurvey/LimeSurvey/pull/1709

Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=30904

Fixed in Release 4.4.0+210129