Who has sufficient privileges to set permissions?

[lista]

I'd like to avoid running web script as admin user or something along those lines, because of another reasons, not really important ATM. So, the script will be executed by the currently logged in user.

Still, if that user has write permissions on a node (through Coordinator role), it still does not have sufficient privileges to actually set permissions. I don't think there's a more powerful role, apart from the admin one, which is again not an option because of security.

Can someone shed some light on this one for me?

Thanks!

[abarisone]

Hi,
first of all you can find here http://www.alfresco.com/help/webclient/concepts/cuh-user-roles-permissions.html the matrix that defines Alfresco permission model.
Besides about setting permissions, Administrator role has all privileges everywhere and users have all rights in their own spaces.
So this means that to change permissions you have to be Admin or have/take ownership of that particular node.

Regards,
Andrea

[lista]

Hi,

thank you for your answer.
I realize that, but I can't give Administrator role to users. Taking/having ownership could do the trick, but I'd like to avoid that extra step.
I suppose custom role is always an option.

[lista]

I lied, Coordinator role is just as powerful as Administrator role, minus the full access. Meaning, if you have a Coordinator role on a node, you can set it's permissions.