On a site we have 2 workflows. The "Blog" workflow applies to 1 node bundle (let's say Blog Post) and the "Editorial" workflow applies to all other bundles.
We have an Editor role which can use all of the transitions in "Editorial" workflow, but only the "create new draft" and "submit for review" transitions in the "Blog" workflow (neither of these transitions result in the Blog Post being published). The Editor role also has the "moderated content bulk publish" and "moderated content bulk unpublish" permissions.
While logged in as an Editor, if I browse to admin/content where there are 2 unpublished Blog Post nodes, I am able to successfully check the box for those two unpublished blog posts, then select and apply the "Publish Latest Revision" action to those nodes.
If I were to edit those nodes, I would only be able to move those drafts to "Needs Review" as is set up in the Blog workflow.
Is it expected that the permissions provided by this module override the permissions as defined by Content Moderation?
Needs work
2.0
Code
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
igorbarato → changed the visibility of the branch 3159943-elaborate-content-moderation to hidden.
I've included a code on the MR to integrate the Workflow transitions permission validation during the plugin access check.