The rules for automatic activation of a workflow should allow the adminsitrator to be more specific. Now you can only have AND operators.

The rule configuration for permissions is perfect, and would love to see more systemwide adoption of it.

It allows you to be as simple or specific as needed.