Initial introduction of permission restrictions on Workflow

I like this much better than getattr. Much more intuitive.