PublicationRequiredPolicy.inc.php

<?php
import('lib.pkp.classes.security.authorization.DataObjectRequiredPolicy');
 
class PublicationRequiredPolicy extends DataObjectRequiredPolicy {
   function __construct($request, &$args, $publicationParameterName = 'publicationId', $operations = null) {
      parent::__construct($request, $args, $publicationParameterName, 'user.authorization.invalidPublication', $operations);
 
      $callOnDeny = array($request->getDispatcher(), 'handle404', array());
      $this->setAdvice(
         AUTHORIZATION_ADVICE_CALL_ON_DENY,
         $callOnDeny
      );
   }
 
   //
   // Implement template methods from AuthorizationPolicy
   //
   function dataObjectEffect() {
      // Get the publication id.
      $publicationId = $this->getDataObjectId();
      if ($publicationId === false) return AUTHORIZATION_DENY;
 
      $publication = Services::get('publication')->get($publicationId);
      if (!is_a($publication, 'Publication')) return AUTHORIZATION_DENY;
 
      // Save the publication to the authorization context.
      $this->addAuthorizedContextObject(ASSOC_TYPE_PUBLICATION, $publication);
      return AUTHORIZATION_PERMIT;
   }
}