classes/security/authorization/internal/MonographRequiredPolicy.inc.php

<?php
import('lib.pkp.classes.security.authorization.DataObjectRequiredPolicy');

class MonographRequiredPolicy extends DataObjectRequiredPolicy {
   function MonographRequiredPolicy(&$request, &$args, $submissionParameterName = 'monographId', $operations = null) {
      parent::DataObjectRequiredPolicy($request, $args, $submissionParameterName, 'user.authorization.invalidMonograph', $operations);
   }

   //
   // Implement template methods from AuthorizationPolicy
   //
   function dataObjectEffect() {
      // Get the monograph id.
      $monographId = $this->getDataObjectId();
      if ($monographId === false) return AUTHORIZATION_DENY;

      // Validate the monograph id.
      $monographDao =& DAORegistry::getDAO('MonographDAO');
      $monograph =& $monographDao->getById($monographId);
      if (!is_a($monograph, 'Monograph')) return AUTHORIZATION_DENY;

      // Validate that this monograph belongs to the current press.
      $press =& $this->_request->getPress();
      if ($press->getId() !== $monograph->getPressId()) return AUTHORIZATION_DENY;

      // Save the monograph to the authorization context.
      $this->addAuthorizedContextObject(ASSOC_TYPE_MONOGRAPH, $monograph);
      return AUTHORIZATION_PERMIT;
   }
}

?>