No workflow state provides Modify Portal Content to a Role (except Manager).
Change the guard to be based on role instead of permission, so that Assignor can also trigger the transition.