I'll reiterate that this should probably be done using admins.cfg / admins_simple.ini and the banid command.
Having said that, if you're changing admin permissions, you should be doing it in a
OnClientPostAdminFilter which exists solely for this purpose.