Does anyone have a resource for custom permissions for 2013? I sometimes have issues with users being able to successfully run workflows or refresh list data connections in an Excel workbook.

So the way my root site is set, I need all users to be able to see the homepage, but not be able to see any lists or anything.

I've got that part working. But sometimes when I have a list that all users can contribute to, the workflow suspends for these users.

I did some googling and saw that this can be prevented because they don't have certain permissions at the root site level, but doesn't really specify what those are. Does anyone else have a setup like this?