I suspect the link that Mark suggests is close, but it does require folder admin permissions.

I'm not aware of another built-in UI though. You're correct that it's not possible to do it via direct SQL, due to inheritance, site admins, and other complicating factors.

Thanks,
Josh