I have created a power user role which is one level below the site administrator. I have set and unset some permissions via the admin account for that.
Now, it seems that the power user can also modify the permissions by himself. I want to disable that.
Actually I want to be sure that only the admin role changes the detailed permissions for any other roles. I can not find that. Any idea?