I changed a user role but users are able to do things they aren't supposed to. What has gone wrong?
Chances are the users haven't logged out since you made the change. Ask them to log out and log in again, and evaluate if that did the trick.
Where is the setting to change the body text for appointments?
Field templates is the answer.