diff --git a/security/Permission.php b/security/Permission.php
index 360967083..09519de06 100755
--- a/security/Permission.php
+++ b/security/Permission.php
@@ -489,7 +489,7 @@ class Permission extends DataObject {
 			'help' => null,
 			'sort' => 100000
 		);
-
+		
 		if($classes) foreach($classes as $class) {
 			$SNG = singleton($class);
 			if($SNG instanceof TestOnly) continue;
@@ -533,6 +533,9 @@ class Permission extends DataObject {
 					'sort' => 0
 				);
 		}
+
+		// Don't let people hijack ADMIN rights
+		if(!Permission::check("ADMIN")) unset($allCodes['ADMIN']);
 		
 		ksort($allCodes);