A simple (but effective) solution may be just to add another attribute in the class definition. You can check this in your template along with user/group checking.
That's pseudo workflow, but may be simpler than writing a new workflow event chain for this.
