Sign-off

Fixed

• Previews only come from a field's own asset container. An asset reference saved into an entry by hand, naming a container the field doesn't use, could be read through Compare changes by anyone who could view the entry. It's now named but not served.
• Images linked by URL in Bard aren't loaded when comparing changes, so the site they're on can't see who's reviewing, and a link to a page on your own site isn't requested on its own. They're shown as links instead.
• Previews are private: never kept by shared caches. Files other than images download rather than opening on the Control Panel's site.
• The settings page refuses a collection listed twice, or listed without steps, instead of quietly keeping only the second.
• Toggles written into the settings file by hand, like 'false', are read as what they say.

Changed

• A new Control Panel icon: a page with a folded corner and a tick, in the nav, on Content → Sign-off and on the dashboard widget.

Added

• Image previews in Compare changes. Assets fields and images in Bard show as thumbnails, marked added or removed, with their alt text. Click one to open it full size next to the image it replaces; ← and → move between the changed images. Reviewers see them without needing access to the asset container, but only the files the entry uses.

Added

• A settings page at Tools → Addons → Sign-off → Settings, for the steps of each collection, the rules and email. It starts from config/sign-off.php, and once saved is used instead of it.
• php please sign-off:check warns about a step with nobody named to approve it.

The first release.

Added

• Steps per collection for Statamic 6 Pro, each approved by roles, user groups, users, a permission or anyone who can publish. The last approval publishes through Statamic, recorded in the entry's revision history.
• Actions in the entry's ••• menu: Submit for sign-off (with a note), Approve (with a comment), Send back (with a required reason), and Withdraw from review.
• The lock: entries in review can't be changed, so what's approved is what goes live. Content that changes anyway has to be submitted again.
• The Sign-off panel in each entry's sidebar: where it is, who approved each step, why it was sent back, what to do next, and earlier rounds.
• Compare changes: each changed field side by side with the changed words highlighted, against the live version or what was submitted last time.
• Content → Sign-off: what's waiting for you, everything in review, and the history of every round.
• The sign_off dashboard widget: waiting for you, sent back to you, and yours in review.
• Emails to reviewers when an entry reaches their step, and to authors when it's sent back or signed off. Queued, and never stop a review if they fail.
• Publish without sign-off permission, recorded in the entry's history. Unpublishing follows Statamic's usual rules, unless turned off.
• Setup checks: problems shown to people who can configure collections, and php please sign-off:check for deploys.
• Storage in flat files (indexed by the Stache) or the database.
• Events: EntrySubmitted, EntryApproved, EntryRejected, SubmissionWithdrawn, EntrySignedOff, and a PHP API.
• Documentation in docs/.