See bug 28882. The gap in the changing permissions form is that we allow a staff user to set and clear permissions that he does not have himself. Which is a bit awkward, especially for Admininstration. I think that we should give that a bit more thought. What do you think?
I agree! You either have to let a user change pretty much everything, or nothing. It would be nice to have a middle ground. The two sys prefs that are involved with this are also fairly confusing - Allow staff members to modify permissions for other staff members (staffaccess) and Set user permissions (permissions) Perhaps as a supervisor I need to be able to reset the password for my staff, but I don't need to be able to change permissions. It would be helpful to have this permissions reworked to allow more flexibility and control.