ReviewStageAccessPolicy.inc.php

<?php
import('lib.pkp.classes.security.authorization.internal.ContextPolicy');
import('lib.pkp.classes.security.authorization.PolicySet');
 
class ReviewStageAccessPolicy extends ContextPolicy {
   function __construct($request, &$args, $roleAssignments, $submissionParameterName, $stageId, $permitDeclined = false) {
      parent::__construct($request);
 
      // Create a "permit overrides" policy set that specifies
      // role-specific access to submission stage operations.
      $workflowStagePolicy = new PolicySet(COMBINING_PERMIT_OVERRIDES);
 
      // Add the workflow policy, for editorial / context roles
      import('lib.pkp.classes.security.authorization.WorkflowStageAccessPolicy');
      $workflowStagePolicy->addPolicy(new WorkflowStageAccessPolicy($request, $args, $roleAssignments, $submissionParameterName, $stageId));
 
      if ($stageId == WORKFLOW_STAGE_ID_INTERNAL_REVIEW || $stageId == WORKFLOW_STAGE_ID_EXTERNAL_REVIEW) {
         // Add the submission policy, for reviewer roles
         import('lib.pkp.classes.security.authorization.SubmissionAccessPolicy');
         $submissionPolicy = new SubmissionAccessPolicy($request, $args, $roleAssignments, $submissionParameterName, $permitDeclined);
         $submissionPolicy->addPolicy(new WorkflowStageRequiredPolicy($stageId));
         $workflowStagePolicy->addPolicy($submissionPolicy);
      }
 
      // Add the role-specific policies to this policy set.
      $this->addPolicy($workflowStagePolicy);
   }
}