The background:

Following up !393 (merged) , we updated security configuration used in Nexedi ERP5 , we wanted to add a security rule so that users uploading a Personal/Private document are allowed to "share" that document (technically, it's sharing with themselves only because it's a private document, but it's useful to distinguish from drafts).

Then we discovered that in the current workflow configuration, only Assignor role is allowed to share, but Assignor is also allowed to publish, but we did not want users to publish their personal documents..

Original commit message:

Previously, only Assignor was able to publish, share and release, this make it impossible to have security configuration where some user can only share and not publish documents.

To address this issue in the more backward compatible way possible, we enable these transitions for Associate and keep them enabled for Assignor role.