What is the point on permissions since a backend user/administrator can create another backend user/administrator and give him permission that he doesn't have? Or I'm missing something? Thanks.

They can only create an Admin account if you give that permission to them. I think it's "Manage Admins". Sounds like you're missing that piece of info, or I misunderstand the question.

Last updated 9 years ago

The idea was to allow users create users, but I though those "subusers" would be managed by its parents and inherit only parent permissions. Like superuser creates an admin, admin creates a chief editor, chief editor creates an editor and stops there (since chief editor will not allow manage admins to editors). But how October works now, an editor can manage even the superuser.