Create a robust permission control
Have you checked out the role delegation module? Sounds to me like your already using it but I may be wrong. It allows users with certain roles to act like the administrator. You can limit which roles can be granted.