PublicationAccessPolicy.inc.php

<?php
import('lib.pkp.classes.security.authorization.internal.ContextPolicy');
import('lib.pkp.classes.security.authorization.SubmissionAccessPolicy');
import('lib.pkp.classes.security.authorization.internal.PublicationRequiredPolicy');
import('lib.pkp.classes.security.authorization.internal.PublicationIsSubmissionPolicy');
 
class PublicationAccessPolicy extends ContextPolicy {
 
   function __construct($request, $args, $roleAssignments, $publicationParameterName = 'publicationId') {
      parent::__construct($request);
 
      // Can the user access this submission? (parameter name: 'submissionId')
      $this->addPolicy(new SubmissionAccessPolicy($request, $args, $roleAssignments));
 
      // Does the publication exist?
      $this->addPolicy(new PublicationRequiredPolicy($request, $args));
 
      // Is the publication attached to the correct submission?
      $this->addPolicy(new PublicationIsSubmissionPolicy(__('api.publications.403.submissionsDidNotMatch')));
   }
}