Problem (?) with CKAN authorization on packages in a custom (not active or draft) state and not owned by any organization.

create-helloworld-moderated-package.py

import ckanapi

site_url = 'http://ckan-1.localdomain:5000/'
api_key = 'a93612c7-fe59-4453-8763-e568409b282b' 

client = ckanapi.RemoteCKAN(site_url)
client.apikey = api_key

data = {
   'name': 'hello-1',
   'title': u'Hello (1)',
   'notes': u'I say Hello, you say Goodbye',
}

# The above results in the package being created, but left unreadable for its creator
pkg_dict = client.action.package_create(**data)

fix-package-show-authz-README.md

The above behaviour is due to package_show authorization logic (in module ckan.logic.auth.get).

I have slightly modified it, in order to allow the creator of a package to see what has previously created. The changes can be found at https://github.com/PublicaMundi/ckan/tree/2.2.1-fix-custom-state-package-authz

I have created a corresponding pull request at ckan/ckan#2051

plugin-with-custom-state-example.py

def create_package_schema(self, schema):
    schema = super(DatasetForm, self).create_package_schema()
    
    # Install field validators/converters ...
    
    # Implement some logic that computes package's next state
    def compute_next_state(key, data, errors, context):
        if data[('name',)].startswith('hello'):
            state = data[('state',)] = 'moderated' 
    
    schema['__after'].append(compute_next_state)
    
    return schema