All my users are able to see a "Workflow" tab when viewing a node - but I only want users of two particular roles to see that, it's not for regular users to worry about.
When I edit my workflow "deal_status", it appears to give me choices that would achieve that,
/admin/config/workflow/workflow/manage/deal_status
This screenshot shows how I am able to choose the two roles:

But then users who are just "Authenticated" are seeing the tab.
I've found the view that creates this tab:
/admin/structure/views/view/workflow_history_per_entity/configure/page
and the permissions there are simply "View published content". I find that if I override that, and set to to be role based and pick my two roles, then it works as I wanted. But I don't think I should be overriding this view in this way, should I?

All my users are able to see a "Workflow" tab when viewing a node - but I only want users of two particular roles to see that, it's not for regular users to worry about.
When I edit my workflow "deal_status", it appears to give me choices that would achieve that,

/admin/config/workflow/workflow/manage/deal_status
This screenshot shows how I am able to choose the two roles:
But then users who are just "Authenticated" are seeing the tab.
I've found the view that creates this tab:
/admin/structure/views/view/workflow_history_per_entity/configure/page
and the permissions there are simply "View published content". I find that if I override that, and set to to be role based and pick my two roles, then it works as I wanted. But I don't think I should be overriding this view in this way, should I?