pub fn authorize_workspace( context: &AccessContext, groups: &K1Groups, family: &WebFamily, ) -> Result<bool, String>