In reply to Ron.

Timothy is correct, the edit_users check was added before the edit_user check, both are now checked, so the plugin author was trying to use edit_user, but wasn't clear that he also had to use edit_users to make it completely safe.