We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
we could make the PublishWorkflowExtension have a constructor argument for who may publish and inject the security context.
it should be quite simple. we can default to ROLE_CAN_PUBLISH or some similar specific role.
ROLE_CAN_PUBLISH