workspace protection