Skip to content

Conversation

@mkovalua
Copy link
Contributor

@mkovalua mkovalua commented Jan 28, 2026

Ticket

Purpose

There is no unified access-control handling for preprints that are pending moderation. The system does not consistently intercept direct access attempts and route non-authorized users to a clear, informative state explaining that the preprint is under moderation.

Introduce a generic static “Preprint Pending Moderation” page that is shown when a preprint is in a pending moderation state and belongs to a provider that requires pre-moderation.

Allowed access:

Contributors on the preprint (all roles: read, write, admin)

Moderators for the specific preprint provider

Restricted access:

Logged-in users who are not contributors

Logged-in users who are not moderators for that provider

Logged-out users

Any general user accessing the preprint via direct URL

Changes

if preprint is pending moderation show it for not contributors/moderators/Logged-out users using /pending-moderation redirection on access (ticket related front end updates CenterForOpenScience/angular-osf#835)

96a5-15e4-48c7-8a79-17ff261adc06.mp4

Side Effects

QE Notes

CE Notes

Documentation

# May raise a permission denied
if check_object_permissions:
self.check_object_permissions(self.request, preprint)

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I believe it's better to leave it where it was in order to not break current behavior

Copy link
Contributor Author

@mkovalua mkovalua Jan 30, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

it is needed to implement the following workflow and behaviour described in the ticket

image

Copy link
Contributor

@ihorsokhanexoft ihorsokhanexoft left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants