It should work the same as in ES.In fact I just did a test. I created a new user and assigned him the Workspace User role and that user couldn't see any of my processes in Workspace.Then I went to one of my process and added the INVOKE_PERM permission to that user (under Security) and the user was a...