Use "view" permission to determine documents to show in workspace

... and only give "publishers" permission to publish in publishing