RestrictedSiteAccessPolicy.inc.php

<?php
import('lib.pkp.classes.security.authorization.AuthorizationPolicy');
 
class RestrictedSiteAccessPolicy extends AuthorizationPolicy {
   var $_router;
 
   var $_request;
 
   function __construct($request) {
      parent::__construct('user.authorization.restrictedSiteAccess');
      $this->_request = $request;
      $this->_router = $request->getRouter();
   }
 
   //
   // Implement template methods from AuthorizationPolicy
   //
   function applies() {
      $context = $this->_router->getContext($this->_request);
      return ( $context && $context->getData('restrictSiteAccess'));
   }
 
   function effect() {
      if (is_a($this->_router, 'PKPPageRouter')) {
         $page = $this->_router->getRequestedPage($this->_request);
      } else {
         $page = null;
      }
 
      if (Validation::isLoggedIn() || in_array($page, $this->_getLoginExemptions())) {
         return AUTHORIZATION_PERMIT;
      } else {
         return AUTHORIZATION_DENY;
      }
   }
 
   //
   // Private helper method
   //
   function _getLoginExemptions() {
      return array('user', 'login', 'help', 'header', 'sidebar', 'payment');
   }
}