Allow logged-in users to confirm/approve/post submissions via UI in addition to emailed links

[jennifer-richards]

Description

When a Submission is "accepted", it usually lands in a state where further action is needed before it is "posted" and the corresponding Document is created. That action might be "confirmation" by current or previous authors or "approval" by an AD or perhaps others. The required action depends on characteristics of the submission - e.g., whether it's a "00" rev or not, whether it's a group or independent submission, etc.

Those actions are currently carried out by following a link sent by email to the people who can take that action. The link includes an access token that is used to authenticate the request. This mechanism allows, e.g., authors who do not have a Datatracker account to carry out the action without having to set one up.

That works when it works, but sometimes email is lost or misclassified as spam, leaving a submission in a state where admin intervention is needed. The "full access" submission status page does not currently help with this as it only allows an accepted submission to be canceled.

For users who do have an account, these actions should be made possible via buttons or other appropriate UI on the submission status page. E.g., if an accepted submission is awaiting author confirmation, a logged-in author should be able to "confirm" the submission and cause it to be "posted" if the submission is awaiting that action.

Note that this should not prevent the actions from being taken based on the existing URL access tokens rather than by logging in. Supporting participants who do not have a Datatracker account should continue.

Code of Conduct

• [X] I agree to follow the IETF's Code of Conduct