Product Architecture Defense: Permissions and Workflows