Microsoft® Office SharePoint® Server 2007 Best Practices

Security Considerations

There are a number of security considerations regarding implementing and deploying workflows, such as who should be able to access a workflow in the first place. For example, you may have a document library that includes multiple workflows but may want to limit who can access one particular workflow without affecting permissions on the document library itself.

Other considerations pertaining to workflow comments, which are stored as part of the workflow history. By locking down a workflow’s workflow history list, you could hide those comments from non-participants.

Notes from the Field: Workflow Security and Column Design Consideration

By default, Workflow columns are created and added to the default view of a document library ...