PKPSiteAccessPolicy.inc.php

<?php
define('SITE_ACCESS_ALL_ROLES', 0x01);
 
import('lib.pkp.classes.security.authorization.PolicySet');
 
class PKPSiteAccessPolicy extends PolicySet {
   function __construct($request, $operations, $roleAssignments, $message = 'user.authorization.loginRequired') {
      parent::__construct();
      $siteRolePolicy = new PolicySet(COMBINING_PERMIT_OVERRIDES);
      if(is_array($roleAssignments)) {
         import('lib.pkp.classes.security.authorization.RoleBasedHandlerOperationPolicy');
         foreach($roleAssignments as $role => $operations) {
            $siteRolePolicy->addPolicy(new RoleBasedHandlerOperationPolicy($request, $role, $operations));
         }
      } elseif ($roleAssignments === SITE_ACCESS_ALL_ROLES) {
         import('lib.pkp.classes.security.authorization.PKPPublicAccessPolicy');
         $siteRolePolicy->addPolicy(new PKPPublicAccessPolicy($request, $operations));
      } else {
         throw new Exception('Invalid role assignments!');
      }
      $this->addPolicy($siteRolePolicy);
   }
 
   //
   // Implement template methods from AuthorizationPolicy
   //
   function effect() {
      // Retrieve the user from the session.
      $request = Application::get()->getRequest();
      $user = $request->getUser();
 
      if (!is_a($user, 'User')) {
         return AUTHORIZATION_DENY;
      }
 
      // Execute handler operation checks.
      return parent::effect();
   }
}