I'd rather we weren't handling the WHERE clause in a random string. It would only take someone to drop a user variable in here later and we'll have an SQL injection vulnerability.

Better would be to build this using the query builder like:
```
$users_query = ORM::factory('user')
  ->orderby('name', 'asc');

// If users is NOT a superadmin, exclude superadmin users
if (! $this->auth->get_user()->has( ORM::factory('role','superadmin') )
{
  $users
    ->join('users_roles', 'users_roles.user_id' , 'users.id', 'INNER')
    ->join('roles', 'roles.id', 'users_roles.role_id', 'INNER')
    ->where('roles.name !=', 'superadmin');
}
$users = $users_query->find_all((int)Kohana::config('settings.items_per_page_admin'), $pagination->sql_offset);
```

This should also handle table prefixes automatically through the query builder