Workflow for any updates to permissions

A workflow option to allow anyone but Admins to make changes to assets/ KB's/ passwords and have it flag. Also bonus if Admins are the only ones who can remove flags, or set it as a permission that certain editors can do this as well