It’s not that bad, I’ve gotten two through already. In my case both were limited to ‘share your score’ type photo posts, so I really didn’t have four separate screens to give them. So I gave them: in-game where the fb share button was, fb in my desktop browser showing an actual post, desktop browser displaying Corona’s fb guide sample posting code, my text editor showing my actual posting code. (and then described similarly as above in the ‘notes’ section they provide) They took it, no questions asked. For such uses, I think they’re more interested in running the app (make sure you give them a nice simple “press this, then press that” walkthrough in the notes) Also make sure your app DOES NOT auto-fill any user message text (that’s a guaranteed rejection – unless you just get very lucky and they don’t notice, which is unlikely since it’s now high priority criteria)
Confirming: new apps MUST complete the review process for extended permissions. otherwise you will NEVER get the extended permissions as a “real user” in a “live app”. you can publish it publicly before completing review, but it’ll only work properly with your dev/test accounts.
On (or about) May 1, 2014 – it essentially “just” happened.