visible content is visible for anon; use workflow to update existing content state
permissions on actions
fix tests/content less behaviour