SubmissionFileAuthorEditorPolicy.inc.php

<?php
import('lib.pkp.classes.security.authorization.internal.SubmissionFileBaseAccessPolicy');
 
class SubmissionFileAuthorEditorPolicy extends SubmissionFileBaseAccessPolicy {
   public function effect() {
      $request = $this->getRequest();
 
      // Get the submission file.
      $submissionFile = $this->getSubmissionFile($request);
      if (!is_a($submissionFile, 'SubmissionFile')) return AUTHORIZATION_DENY;
 
      // Allow if this is not a file submitted with a review
      if ($submissionFile->getFileStage() != SUBMISSION_FILE_REVIEW_ATTACHMENT) return AUTHORIZATION_PERMIT;
 
      // Deny if the user is assigned as an author to any stage, and this file is
      // attached to a blind review
      $userRoles = $this->getAuthorizedContextObject(ASSOC_TYPE_ACCESSIBLE_WORKFLOW_STAGES);
      foreach ($userRoles as $stageRoles) {
         if (in_array(ROLE_ID_AUTHOR, $stageRoles)) {
            $reviewAssignmentDao = DAORegistry::getDAO('ReviewAssignmentDAO'); /* @var $reviewAssignmentDao ReviewAssignmentDAO */
            $reviewAssignment = $reviewAssignmentDao->getById((int) $submissionFile->getAssocId());
            if ($reviewAssignment && $reviewAssignment->getReviewMethod() != SUBMISSION_REVIEW_METHOD_OPEN){
               return AUTHORIZATION_DENY;
            }
            break;
         }
      }
 
      return AUTHORIZATION_PERMIT;
   }
}