Test lambdas/workflows using the group data type, some ideas:

• choosing a group/list of groups in a user-input store
• user without view privileges in a space should be able to see and choose the groups he belongs to, and not see the others (caution: make sure his groups do not have the view privilege in the space either, otherwise the user will inherit it)