Permissions and Workflow

[timothy_michael]

What are the permissions required for a user to participate in a simple workflow? I've tried a bunch of tests, and it seems like a user can only submit a document in a simple workflow if they have Coordinator access in both the source and target spaces.

This seems like overkill to me. What I'd really like is for a user who has Editor capabilities in the source space be able to submit a document for workflow without having read access to the target space. Is this possible? I know I can create a custom permissionDefinitions.xml file, and custom groups that support what I'm looking for, but what kind of low-level permissions are required for workflow?

Thanks in advance.

[timothy_michael]

FYI - I've found the answer to this.
For simple workflow, it looks like the the user needs at least the following permissions in the source space:

Consumer
Write
CheckOut
DeleteNode
DeleteChildren
DeleteAssociations

The user needs at least the following permissions in the target space:

Write
CreateChildren
LinkChildren
ReadProperties
ReadChildren

The problem I'm running into is that ReadContent is required for adding another simple workflow rule to that document once it's dropped in the second space. But I want to keep the second space hidden from the user, which I can't do if I add ReadContent.

My guess is I need to create a custom script which adds the permission, moves the file, then removes the permission, but I'm hoping there's another way around it. Any ideas?

-Tim