Workflow scripting and security
Workflow scripts have the ability to update objects that the user normally does not have access too. For example, a workflow script can change a locked-down formula's status to obsolete after a new formulation is approved. It is the Workflow author's responsibility to code the script such that it preserves security where appropriate.