We have a great category security system within K2.

All of this works with Users, Groups or K2 roles.

Workflows ONLY work with Users and Groups.

This is a shame, because K2 roles could be a great way to 'assign permissions' to a K2 application. Currently, you would need to add somebody to a role (Which gives them access to forms, for example) and you need to go to the WF and assign it to a group or user.

In total, roles could be great, but now it's a bit useless because the workflow is simply not included in 'roles'.