Function governance_actions 

pub fn governance_actions(workspace: &str) -> TreePath

Every governance action of workspace: workspace:<id>/kind:tilo.room/action:*. More specific than the workspace’s resource, where the Editor’s rule denies governance, so a grant here decides each governance action whatever the grantee’s role says about the workspace’s resource.