Well, but it IS a bug and therefore it should be reported in my eyes.
The defs will then say themselve if they want to fix it or not.
Actually i see a reason for it. Because why are some functions not allowed is because they didn't want to let every admin change the permissions themselves, but with that bug, it's easyli possible, and therefore it's a security problem (still normally if you make someone and admin, you should trust him that far, but hey, i have not designed the permission system

)