ReviewerReviewFilesGridDataProvider.inc.php

<?php
 
import('lib.pkp.controllers.grid.files.review.ReviewGridDataProvider');
 
class ReviewerReviewFilesGridDataProvider extends ReviewGridDataProvider {
   function __construct() {
      parent::__construct(SUBMISSION_FILE_REVIEW_FILE);
   }
 
 
   //
   // Implement template methods from GridDataProvider
   //
   function getAuthorizationPolicy($request, $args, $roleAssignments) {
      import('lib.pkp.classes.security.authorization.SubmissionAccessPolicy');
      $context = $request->getContext();
      $policy = new SubmissionAccessPolicy($request, $args, $roleAssignments, 'submissionId', !$context->getData('restrictReviewerFileAccess'));
 
      $stageId = $request->getUserVar('stageId');
      import('lib.pkp.classes.security.authorization.internal.WorkflowStageRequiredPolicy');
      $policy->addPolicy(new WorkflowStageRequiredPolicy($stageId));
 
      // Add policy to ensure there is a review round id.
      import('lib.pkp.classes.security.authorization.internal.ReviewRoundRequiredPolicy');
      $policy->addPolicy(new ReviewRoundRequiredPolicy($request, $args));
 
      // Add policy to ensure there is a review assignment for certain operations.
      import('lib.pkp.classes.security.authorization.internal.ReviewAssignmentRequiredPolicy');
      $policy->addPolicy(new ReviewAssignmentRequiredPolicy($request, $args, 'reviewAssignmentId'));
 
      return $policy;
   }
 
   function loadData($filter = array()) {
      $submissionFileData = parent::loadData();
      $reviewFilesDao = DAORegistry::getDAO('ReviewFilesDAO'); /* @var $reviewFilesDao ReviewFilesDAO */
      $reviewAssignment = $this->getAuthorizedContextObject(ASSOC_TYPE_REVIEW_ASSIGNMENT);
      foreach ($submissionFileData as $fileId => $fileData) {
         if (!$reviewFilesDao->check($reviewAssignment->getId(), $fileId)) {
            // Not permitted; remove from list.
            unset($submissionFileData[$fileId]);
         }
      }
      return $submissionFileData;
   }
 
   function getRequestArgs() {
      $reviewAssignment = $this->getAuthorizedContextObject(ASSOC_TYPE_REVIEW_ASSIGNMENT);
      return array_merge(parent::getRequestArgs(), array(
         'reviewAssignmentId' => $reviewAssignment->getId()
      ));
   }
}