ReviewAssignmentRequiredPolicy.inc.php

<?php
import('lib.pkp.classes.security.authorization.DataObjectRequiredPolicy');
 
class ReviewAssignmentRequiredPolicy extends DataObjectRequiredPolicy {
 
   var $_reviewMethods = array();
 
   function __construct($request, &$args, $parameterName = 'reviewAssignmentId', $operations = null, $reviewMethods = null) {
      parent::__construct($request, $args, $parameterName, 'user.authorization.invalidReviewAssignment', $operations, $reviewMethods);
      $this->_reviewMethods = $reviewMethods;
   }
 
   //
   // Implement template methods from AuthorizationPolicy
   //
   function dataObjectEffect() {
      $reviewId = (int)$this->getDataObjectId();
      if (!$reviewId) return AUTHORIZATION_DENY;
 
      $reviewAssignmentDao = DAORegistry::getDAO('ReviewAssignmentDAO'); /* @var $reviewAssignmentDao ReviewAssignmentDAO */
      $reviewAssignment = $reviewAssignmentDao->getById($reviewId);
      if (!is_a($reviewAssignment, 'ReviewAssignment')) return AUTHORIZATION_DENY;
 
      // If reviewMethods is defined, check that the assignment uses the defined method(s) 
      if ($this->_reviewMethods) {
         if (!in_array($reviewAssignment->getReviewMethod(), $this->_reviewMethods)) {
            return AUTHORIZATION_DENY;
         }
      }
 
      // Ensure that the review assignment actually belongs to the
      // authorized submission.
      $submission = $this->getAuthorizedContextObject(ASSOC_TYPE_SUBMISSION);
      assert(is_a($submission, 'Submission'));
      if ($reviewAssignment->getSubmissionId() != $submission->getId()) return AUTHORIZATION_DENY;
 
      // Ensure that the review assignment is for this workflow stage
      $stageId = $this->getAuthorizedContextObject(ASSOC_TYPE_WORKFLOW_STAGE);
      if ($reviewAssignment->getStageId() != $stageId) return AUTHORIZATION_DENY;
 
      // Save the review Assignment to the authorization context.
      $this->addAuthorizedContextObject(ASSOC_TYPE_REVIEW_ASSIGNMENT, $reviewAssignment);
      return AUTHORIZATION_PERMIT;
   }
}