Permission module works very good. Keep attention when working with your admin account and different users you created for different membership levels. Cause you are admin they are also able to work on any account, since your different identities inherit admin privileges from your admin account. Try to create a seperate account with another email address, in order to check, if that account still can perform all admin actions, as well. If it cannot do so, everything works as it should.