Sub Admin can add permissions, but he shouldn't be able

[unable to retrieve full-text content]

My second tier admin below Server admin, has a i_permission_modify_power of 70 and i_group_modify_power at 70. As well as b_virtualserver_servergroup_create checked. They use it to create fun groups. I've tested this and the admin can set b_client_skip_channelgroup_permissions, view client ip... Sub Admin can add permissions, but he shouldn't be able