Up until sometime this spring 2020, non-admin users were able to manually renew memberships in the back-end.
I assume a Civi upgrade effected this. The site is on 5.28.3.
We are using Activity Type ACL extension but that was added well prior to this issue coming up. Related member permissions I have for non-admin user level is: