I expected workspace permissions in "?q=admin/user/permissions" to show/hide workspace in user profile.

Instead it seems to be in "?q=admin/settings/workspace"

I understand the need to put "Name of link to user's workspace:" in there, but not permissions.
Perhaps have both, then both pages can change which roles have workspace shown/hidden.