Hi,
in short - each memory space that is accessed by any master must be covered by MPU descriptors. If the memory space is not covered, it is considered as access violation (this leads to bus error). Optionally also process identifier is used. This is described in chapter "Access Evaluation - Hit Determination".
If memory space is covered by MPU descriptor, it is necessary to evaluate if master has rights to do such access (read, write, execute in user or supervisor mode). This is described in chapter "Access Evaluation - Privilege Violation Determination". And again - if master has not rights for such access, it leads to access violation.
Attached is simple example for MPC5604B - it shows how process identifier works. It can be simply modified to test read-write-execute access. Maybe it will be helpful.
Regards,
Lukas