Set the ACL with API by non-admin user

Hi experts,

We are enhancing the file upload functionalities with setting the readers of the documents. The upload user is not admin user but he can have the full control or permission owner of the folder, but we found he can't still setting the ACL of the documents he created in the folder. While if he has the admin role, he can setting the ACL successfully.

Can the permission owner be inherited? Or any other way to achieve this? Urgent! Any helpful anwser will be reward, many tks!!!!