SubmissionAuthorPolicy.inc.php

<?php
import('lib.pkp.classes.security.authorization.AuthorizationPolicy');
import('lib.pkp.classes.security.authorization.internal.UserAccessibleWorkflowStageRequiredPolicy');
 
class SubmissionAuthorPolicy extends AuthorizationPolicy {
   var $_request;
 
   function __construct($request) {
      parent::__construct('user.authorization.submissionAuthor');
      $this->_request = $request;
   }
 
   //
   // Implement template methods from AuthorizationPolicy
   //
   function effect() {
      // Get the user
      $user = $this->_request->getUser();
      if (!is_a($user, 'User')) return AUTHORIZATION_DENY;
 
      // Get the submission
      $submission = $this->getAuthorizedContextObject(ASSOC_TYPE_SUBMISSION);
      if (!is_a($submission, 'Submission')) return AUTHORIZATION_DENY;
 
      $context = $this->_request->getContext();
 
      // Check authorship of the submission. Any ROLE_ID_AUTHOR assignment will do.
      $stageAssignmentDao = DAORegistry::getDAO('StageAssignmentDAO'); /* @var $stageAssignmentDao StageAssignmentDAO */
      $userGroupDao = DAORegistry::getDAO('UserGroupDAO'); /* @var $userGroupDao UserGroupDAO */
      $submitterAssignments = $stageAssignmentDao->getBySubmissionAndStageId($submission->getId(), null, null, $user->getId());
      $workflowStages = Application::getApplicationStages();
      while ($assignment = $submitterAssignments->next()) {
         $userGroup = $userGroupDao->getById($assignment->getUserGroupId());
         if ($userGroup->getRoleId() == ROLE_ID_AUTHOR) {
 
            $accessibleWorkflowStages = array();
            foreach ($workflowStages as $stageId) {
               $accessibleStageRoles = Services::get('user')->getAccessibleStageRoles($user->getId(), $context->getId(), $submission, $stageId);
               if (!empty($accessibleStageRoles)) {
                  $accessibleWorkflowStages[$stageId] = $accessibleStageRoles;
               }
            }
            $this->addAuthorizedContextObject(ASSOC_TYPE_ACCESSIBLE_WORKFLOW_STAGES, $accessibleWorkflowStages);
 
            return AUTHORIZATION_PERMIT;
         }
      }
      return AUTHORIZATION_DENY;
   }
}