That said, what is the workflow doing? It can't send a user to a page they don't have permissions for.