HandlerOperationPolicy.inc.php

<?php
import('lib.pkp.classes.security.authorization.AuthorizationPolicy');
 
class HandlerOperationPolicy extends AuthorizationPolicy {
   var $_request;
 
   var $_operations = array();
 
   function __construct($request, $operations, $message = null) {
      parent::__construct($message);
      $this->_request =& $request;
 
      // Make sure a single operation doesn't have to
      // be passed in as an array.
      assert(is_string($operations) || is_array($operations));
      if (!is_array($operations)) {
         $operations = array($operations);
      }
      $this->_operations = $operations;
   }
 
 
   //
   // Setters and Getters
   //
   function &getRequest() {
      return $this->_request;
   }
 
   function getOperations() {
      return $this->_operations;
   }
 
 
   //
   // Private helper methods
   //
   function _checkOperationWhitelist() {
      // Only permit if the requested operation has been whitelisted.
      $router = $this->_request->getRouter();
      $requestedOperation = $router->getRequestedOp($this->_request);
      assert(!empty($requestedOperation));
      return in_array($requestedOperation, $this->_operations);
   }
}