I feel like I'm missing something very obvious but I just can't find it. Version 12.1.3.23267
Use case: A blog application in a joinless group with site role permissions controlling visibility, ability to post, and review workflow (Phase Based, two phases).
Question 1 (sanity check): In order for users to participate in the review workflow, they must have the "Moderate and Review Abuse" permission, yes?
This is not intuitive but on a hunch after logging exceptions from the Content script of the Administrative Panel Shell (System.String.StartsWith (String Value) Value can't be null) on users who are a part of the review workflow but not part of an moderator workflow, I enabled this permission and it resolved the exception.
Question 2: Where does the Reporting - View Reports control permission lie for Blogs?
Groups seem to have a separate permission for group reports, but that doesn't seem to apply to all applications within the group (at least according to trial/error testing). Because Manage Blogs has way too much power for the use case, I have not granted that permission yet but do have a need for the users at the final phase of review workflow to interact with reporting.