Hiding a Workspace and its Scenarios

In this use case, we want to hide workspace "Sensitive Data Sets" from users with role INTERN, as well as all the scenarios that are contained in this workspace.

This can be implemented by adding the following permission rules to the ruleset attached to the workspace.

role(INTERN), ACCESS, WORKSPACE, false
role(INTERN), ACCESS, SCENARIO, false

The first rule denies access to the workspace. The second rule denies access to the scenarios, and will be found as part of the ruleset attached to the workspace that contains the scenario.