Thank you

Perfect solution to a vexing problem. My admin's need to be able to assign and remove the membership and moderator roles -- but why bother to have a protected superuser role if any admin can assign the privilege to even an unauthorized user. I no longer need to give 'administer access control' privileges to anyone but the superuser. Your module patches a real flaw in drupal and should be considered essential.

Thank You!