In the CMP, as asset that is attached to a task inherits the permissions from that task and the campaign over the task. This makes sense while you are working on a task. But, these inherited permissions are maintained after the task is complete and the asset has been moved to the library. This makes managing permissions in the library very difficult as you have to trace back permissions to a variety of places, when really, what I want to be able to do is control library permissions regardless of the campaign or task.
For example, I want to add a logo. That logo should only be available to a small group of CMP users, and those users are NOT the users who will do the CMP intake/task/workflow process. So, I make a folder in the library that has the correct permissions. BUT, regardless of those permissions, any owner on a task that touched this logo will also have access to this logo.