Amélioré
Client approval links are owner, admin, or editor only
Viewers cannot create a client review link. Approving a dated post schedules it — the page never publishes immediately.
Only workspace owners, admins, and editors can create or revoke a client approval link. Viewers are blocked in the API and by tighter row-level security, so a member cannot insert a link from the table. Tokens are hashed with HMAC-SHA256 using a server secret. The review page copy now says that approving a dated post schedules it; the link still never publishes immediately.