When allowing an admin to change permissions ...
Why not display what the current cumulative permissions are !
In the above markup, member gldtn doesn't have permission to delete all warnings (Cumulative permissions show it was never set). By clicking on the [ ] checkbox .... the black X would instantly change to a green checkmark .
Note: Admins would be prevented from attempting to allow a permission with a red X, as allowing it wouldn't get rid of the red revoked setting.