Several access problems could be solved, if an Asset would have another group or even two, which excludes view and/or edit the asset.

E.g.: every admin-function could be fine-graded available

or  certain users could be excluded from changing their profile