Igor,
Attempting to run the self service portal for any user not assigned 'edit' permission on the workflow or underlying packages fails with the initial error I posted. I'm attaching a scnreeshot of the workflow failure point below. It appears under 4.1 we could assign execute and this would work, but the model has been changed as you mentioned.
