Workflow - security

Please answer the below security  related questions for the workflows.

1.I have created a on demand workflow and I want only a person with manger level  security to run that On demand  workflow, how to do that ?

2.Will a customer service representative  be able to run a on demand workflow with out of box security role? If he can run then I want to disable that .

Thanks.