Applying Access Controls to Workflows