diff --git a/bento_lib/package.cfg b/bento_lib/package.cfg
index 8df1d61..738c708 100644
--- a/bento_lib/package.cfg
+++ b/bento_lib/package.cfg
@@ -1,5 +1,5 @@
 [package]
 name = bento_lib
-version = 9.0.0a4
+version = 9.0.0a5
 authors = David Lougheed, Paul Pillot
 author_emails = david.lougheed@mail.mcgill.ca, paul.pillot@computationalgenomics.ca
diff --git a/bento_lib/workflows/models.py b/bento_lib/workflows/models.py
index 314be73..2e3f2f2 100644
--- a/bento_lib/workflows/models.py
+++ b/bento_lib/workflows/models.py
@@ -145,7 +145,10 @@ class WorkflowDefinition(BaseModel):
     type: WorkflowType  # One of a few pre-defined values for categorizing workflow type/purpose
     description: str  # Human-readable workflow description
     file: str  # WDL file name
-    tags: frozenset[str] = frozenset(())  # Should include data type(s) if relevant
+    data_type: str | None = None  # Data type; temporary for authz until we have proper token exchange for WES  TODO
+    #  - If data_type is None, the permissions should be *more* severe, not less
+    #    (check if they have whole project/dataset access)
+    tags: frozenset[str] = frozenset()  # Should include data type(s) if relevant
     # Here, inputs defines UI / injected inputs for this workflow. These get transformed into a JSON parameters file
     # which is fed to the WDL workflow description / Cromwell.
     # As such, many of these workflow input types end up mapping to the same WDL type:
diff --git a/tests/test_workflows.py b/tests/test_workflows.py
index cccd254..b4ad367 100644
--- a/tests/test_workflows.py
+++ b/tests/test_workflows.py
@@ -39,6 +39,7 @@ def test_workflow_set():
         name="Test Workflow 2",
         type="analysis",
         description="A test workflow",
+        data_type="experiment",
         tags=["experiment", "cbioportal"],
         file="test.wdl",
         inputs=[