guard_workspace now defaults allowed_roles to OWNER+ADMIN+EDITOR; test_guard_workspace_without_roles assertion updated to match.
guard_workspace now defaults allowed_roles to OWNER+ADMIN+EDITOR; test_guard_workspace_without_roles assertion updated to match.