All permissions are per address, and it makes no difference whether these addresses are on the same node or not. So the behavior you are looking for is already built in.
Specifically you can send assets from one address to another most easily sendassetfrom – there are also lots of other options, e.g. sendfrom if you want to send more than one asset type in a single transaction.