Hi gman,
You would have to edit functions 'canAdd', 'canEdit', etc on 'application/models/projects/Project.class.php', line 1383 onwards. Those functions return true when the user has permissions to add, edit, etc. So you would have to return true when the user can manage workspaces and some other condition that you add to know which workspaces he can manage.