tbh, it is pretty much given that anyone should not be able to promote above their own rank, we sat down and calculated our security carefully but unfortunately to say that the system failed us. If it was in our fault we would take the loss and live with it, but in such a scenario we really think that the developers should stand up for an action.