Workspace settings stay closed to a limited grant, all the way through

Workspace settings, the product and service catalogue, and the onboarding concierge each manage something that belongs to the whole workspace, so a permission limited to a user’s own records has no meaning there. The pages already stayed closed to such a grant, but the saves behind them did not. Now they refuse it too, the same way they refuse someone without the permission at all, and the catalogue hides its create, edit and delete controls from them.

Nothing changes for admins or for any role’s default access: every role that manages these areas holds its permission for the whole workspace.