Steps to reproduce

1. Create a template with limited permissions (the everyone group cannot access it)
2. Invite a member user to the template
3. Log in as the member user and create a workspace with the template
4. Log in as the admin and revoke the member user from accessing the template
5. Log in as the member user and notice the user cannot see ANY of their workspaces
   

Expected behavior

The member user can still see their workspaces, except the workspaces they created from the revoked template. This isn't a fantastic behavior, but it's significantly better than what we are showing now.

This is a regression of some sort, but I'm not sure how long it's been out. I recall that the workspace used to list fine but then errored when clicked in with a 403 (which is appropriate)