classes/security/authorization/internal/MonographFileViewableReviewerResponseRequiredPolicy.inc.php

<?php
import('classes.security.authorization.internal.MonographFileBaseAccessPolicy');

class MonographFileViewableReviewerResponseRequiredPolicy extends MonographFileBaseAccessPolicy {
   function MonographFileViewableReviewerResponseRequiredPolicy(&$request, $fileIdAndRevision = null) {
      parent::MonographFileBaseAccessPolicy($request, $fileIdAndRevision);
   }


   //
   // Implement template methods from AuthorizationPolicy
   //
   function effect() {
      $request =& $this->getRequest();

      // Get the user
      $user =& $request->getUser();
      if (!is_a($user, 'PKPUser')) return AUTHORIZATION_DENY;

      // Get the monograph file
      $monographFile =& $this->getMonographFile($request);
      if (!is_a($monographFile, 'MonographFile')) return AUTHORIZATION_DENY;

      // Make sure that it's in the review stage
      if ($monographFile->getFileStage() != MONOGRAPH_FILE_REVIEW_ATTACHMENT) return AUTHORIZATION_DENY;

      // Make sure the file belongs to the monograph in request.
      $monograph =& $this->getAuthorizedContextObject(ASSOC_TYPE_MONOGRAPH);
      if (!is_a($monograph, 'Monograph')) return AUTHORIZATION_DENY;
      if ($monograph->getId() != $monographFile->getSubmissionId()) return AUTHORIZATION_DENY;

      // Make sure the file is visible.
      if (!$monographFile->getViewable()) return AUTHORIZATION_DENY;

      // Made it through -- permit access.
      return AUTHORIZATION_PERMIT;
   }
}

?>