how can i specify which users/swimlane could start which workflow?
you cant. That is up to your webapp/application to protect.
