[schema] add workflow on BlogEntry so that anonymous could only see published blog entries

migration/1.7.0_Any.py

+add_relation_definition('BlogEntry',  'in_state', 'State')
+add_relation_definition('TrInfo',  'wf_info_for', 'BlogEntry')
+add_relation_definition('BlogEntry',  'custom_workflow', 'Workflow')
+
+
+# add BlogEntry workflow
+bwf = add_workflow(_('default BlogEntry workflow'), 'BlogEntry')
+
+draft = bwf.add_state(_('draft'), initial=True)
+published = bwf.add_state(_('published'))
+
+publish = bwf.add_transition(_('publish'), draft, published,
+                             ('managers',))
+checkpoint()
+
+# set state to published for already existing blog entries
+blogentries = rql('Any B WHERE B is BlogEntry')
+
+for blogentry in blogentries:
+    session.unsafe_execute('SET B in_state S WHERE S name "published", B eid %(b)s', {'b': blogentry[0]})
+
+checkpoint()

migration/postcreate.py

 # postcreate script. You could setup a workflow here for example
 
+# BlogEntry workflow
+bwf = add_workflow(_('default BlogEntry workflow'), 'BlogEntry')
+
+draft = bwf.add_state(_('draft'), initial=True)
+published = bwf.add_state(_('published'))
+
+publish = bwf.add_transition(_('publish'), draft, published,
+                             ('managers',))
+

schema.py

 from yams.buildobjs import EntityType, String, SubjectRelation
+from cubicweb.schema import WorkflowableEntityType
 try:
     from yams.buildobjs import RichString
 except ImportError:
@@ -11,7 +12,13 @@
     rss_url = String(maxsize=128, description=_('blog\'s rss url (useful for when using external site such as feedburner)'))
 
 
-class BlogEntry(EntityType):
+class BlogEntry(WorkflowableEntityType):
+    permissions = {
+        'read': ('managers', 'users', ERQLExpression('X in_state S, S name "published"'),),
+        'add': ('managers', 'users'),
+        'update': ('managers', 'owners'),
+        'delete': ('managers', 'owners')
+        }
     title = String(required=True, fulltextindexed=True, maxsize=256)
     content = RichString(required=True, fulltextindexed=True)
     entry_of = SubjectRelation('Blog', cardinality='**')