classes/security/authorization/internal/SignoffAssignedToUserAccessPolicy.inc.php

<?php
import('lib.pkp.classes.security.authorization.AuthorizationPolicy');

class SignoffAssignedToUserAccessPolicy extends AuthorizationPolicy {
   var $_request;

   function SignoffAssignedToUserAccessPolicy(&$request) {
      parent::AuthorizationPolicy('user.authorization.monographSignoff');
      $this->_request =& $request;
   }

   //
   // Implement template methods from AuthorizationPolicy
   //
   function effect() {
      // A signoff should already be in the context.
      $signoff =& $this->getAuthorizedContextObject(ASSOC_TYPE_SIGNOFF);
      if (!is_a($signoff, 'Signoff')) return AUTHORIZATION_DENY;

      // Check that there is a currently logged in user.
      $user =& $this->_request->getUser();
      if (!is_a($user, 'User')) return AUTHORIZATION_DENY;

      // Check if the signoff is assigned to the user.
      if ($signoff->getUserId() == $user->getUserId()) return AUTHORIZATION_PERMIT;

      // Otherwise, deny.
      return AUTHORIZATION_DENY;
   }
}

?>