SubmissionFileUploaderAccessPolicy.inc.php

<?php
 
import('lib.pkp.classes.security.authorization.internal.SubmissionFileBaseAccessPolicy');
 
class SubmissionFileUploaderAccessPolicy extends SubmissionFileBaseAccessPolicy {
   function __construct($request, $fileIdAndRevision = null) {
      parent::__construct($request, $fileIdAndRevision);
   }
 
 
   //
   // Implement template methods from AuthorizationPolicy
   //
   function effect() {
      $request = $this->getRequest();
 
      // Get the user
      $user = $request->getUser();
      if (!is_a($user, 'User')) return AUTHORIZATION_DENY;
 
      // Get the submission file
      $submissionFile = $this->getSubmissionFile($request);
      if (!is_a($submissionFile, 'SubmissionFile')) return AUTHORIZATION_DENY;
 
      // Check if the uploader is the current user.
      if ($submissionFile->getUploaderUserId() == $user->getId()) {
         return AUTHORIZATION_PERMIT;
      } else {
         return AUTHORIZATION_DENY;
      }
   }
}