This is what I did instead for those who may be interested using repoinit allow jcr:read on /var/workflow/modelsdeny jcr:read on /var/workflow/models restriction(rep:glob,/ac-newsletter-workflow-simple/)deny jcr:read on /var/workflow/models restriction(rep:glob,/dam/)deny jcr:read on /var/workflow/m...