ManagerRequiredPolicy.inc.php

<?php
import('lib.pkp.classes.security.authorization.AuthorizationPolicy');
 
class ManagerRequiredPolicy extends AuthorizationPolicy {
   var $_request;
 
   function __construct($request) {
      parent::__construct('user.authorization.managerRequired');
      $this->_request = $request;
   }
 
   //
   // Implement template methods from AuthorizationPolicy
   //
   function effect() {
      // Get the submission
      $submission = $this->getAuthorizedContextObject(ASSOC_TYPE_SUBMISSION);
      if (!is_a($submission, 'Submission')) return AUTHORIZATION_DENY;
 
      // Get the stage
      $stageId = $this->getAuthorizedContextObject(ASSOC_TYPE_WORKFLOW_STAGE);
      if (!is_numeric($stageId)) return AUTHORIZATION_DENY;
 
      $stageAssignmentDao = DAORegistry::getDAO('StageAssignmentDAO'); /* @var $stageAssignmentDao StageAssignmentDAO */
      if ($stageAssignmentDao->editorAssignedToStage($submission->getId(), $stageId)) {
         return AUTHORIZATION_PERMIT;
      } else {
         return AUTHORIZATION_DENY;
      }
   }
}