added join workspace button if policy allows self joining

+1 for using plone.protect here