Inheritance diagram for RoleBasedHandlerOperationPolicy:

Public Member Functions
	__construct ($request, $roles, $operations, $message='user.authorization.roleBasedAccessDenied', $allRoles=false)

	_checkUserRoleAssignment ($userRoles)

	effect ()

Public Member Functions inherited from HandlerOperationPolicy
	__construct ($request, $operations, $message=null)

	_checkOperationWhitelist ()

	getOperations ()

&	getRequest ()

Public Member Functions inherited from AuthorizationPolicy
	__construct ($message=null)

	addAuthorizedContextObject ($assocType, &$authorizedObject)

	applies ()

&	getAdvice ($adviceType)

&	getAuthorizedContext ()

&	getAuthorizedContextObject ($assocType)

	hasAdvice ($adviceType)

	hasAuthorizedContextObject ($assocType)

	setAdvice ($adviceType, &$adviceContent)

	setAuthorizedContext (&$authorizedContext)

Data Fields
	$_allRoles

	$_roles = array()

Data Fields inherited from HandlerOperationPolicy
	$_operations = array()

	$_request

Data Fields inherited from AuthorizationPolicy
	$_advice = array()

	$_authorizedContext = array()

Detailed Description

Class to control access to handler operations via role based access control.

Constructor & Destructor Documentation

RoleBasedHandlerOperationPolicy::__construct	(	$request,
		$roles,
		$operations,
		$message = `'user.authorization.roleBasedAccessDenied'`,
		$allRoles = `false`
	)

Constructor

Parameters

$request	PKPRequest
$roles	array\|integer either a single role ID or an array of role ids
$operations	array\|string either a single operation or a list of operations that this policy is targeting.
$message	string a message to be displayed if the authorization fails
$allRoles	boolean whether all roles must match ("all of") or whether it is enough for only one role to match ("any of"). Default: false ("any of")