RepresentationRequiredPolicy.inc.php

<?php
import('lib.pkp.classes.security.authorization.DataObjectRequiredPolicy');
 
class RepresentationRequiredPolicy extends DataObjectRequiredPolicy {
   function __construct($request, &$args, $parameterName = 'representationId', $operations = null) {
      parent::__construct($request, $args, $parameterName, 'user.authorization.invalidRepresentation', $operations);
   }
 
   //
   // Implement template methods from AuthorizationPolicy
   //
   function dataObjectEffect() {
      $representationId = (int)$this->getDataObjectId();
      if (!$representationId) return AUTHORIZATION_DENY;
 
      // Need a valid submission in request.
      $submission = $this->getAuthorizedContextObject(ASSOC_TYPE_SUBMISSION);
      if (!is_a($submission, 'Submission')) return AUTHORIZATION_DENY;
 
      // Need a valid publication in request
      $publication = $this->getAuthorizedContextObject(ASSOC_TYPE_PUBLICATION);
      if (!is_a($publication, 'Publication')) return AUTHORIZATION_DENY;
 
      // Make sure the representation belongs to the submission.
      $representationDao = Application::getRepresentationDAO();
      $representation = $representationDao->getById($representationId, $publication->getId(), null);
      if (!is_a($representation, 'Representation')) return AUTHORIZATION_DENY;
 
      // Save the representation to the authorization context.
      $this->addAuthorizedContextObject(ASSOC_TYPE_REPRESENTATION, $representation);
      return AUTHORIZATION_PERMIT;
   }
}