further work on WorkspacePermissions