Currently, anyone whether they're logged in or not can change the state of a post. We should allow the admin to restrict to logged in users, or restrict to specific users.
This should actually be based on user capabilities
Would be a big win for us to have this feature. Thanks!
+1 here (this and media in comments would make this an Über Tool)
This would be a huge win. On wp.com this feature is just available if your site is private. If you turn this on on a public site you can not trust this feature anymore, because "someone" is changing the status everytime ...
With 0.3.3, you must now at least be logged into the site to change a post's state. Marking this as closed unless there are strong feelings about doing this based on capabilities, since the name of the user that changed the state will be present in the audit logs.