improve workspace workflow permissions for WorkspaceManager