extends workbench_access module with crud-style access control dependent on moderation state