Ticket #13045 (closed Bug: fixed)
Hardcoded workflow state in new byline code
|Reported by:||alecm||Owned by:||piv|
Though this was a known risk of this PLIP (#8699), it seems problematic. We don't really hardcode behavior based on specific workflow state names in Plone; I think for good reason. This feature should either use an admin selectable workflow state config, or ignore workflow state entirely and always show the effective data if available. The later solution would avoid the need to look at workflow internals as well, which is best avoided and creates a potential undesirable information leak (which will be described in another ticket).
See the related review: