QueryNoteFilesGridHandler.inc.php

<?php
 
import('lib.pkp.controllers.grid.files.fileList.FileListGridHandler');
 
class QueryNoteFilesGridHandler extends FileListGridHandler {
   function __construct() {
      // import app-specific grid data provider for access policies.
      $request = Application::get()->getRequest();
      $stageId = $request->getUservar('stageId'); // authorized in authorize() method.
      import('lib.pkp.controllers.grid.files.query.QueryNoteFilesGridDataProvider');
      parent::__construct(
         new QueryNoteFilesGridDataProvider($request->getUserVar('noteId')),
         $stageId,
         FILE_GRID_ADD|FILE_GRID_DELETE|FILE_GRID_VIEW_NOTES|FILE_GRID_EDIT
      );
 
      $this->addRoleAssignment(
         array(ROLE_ID_MANAGER, ROLE_ID_SUB_EDITOR, ROLE_ID_ASSISTANT, ROLE_ID_REVIEWER, ROLE_ID_AUTHOR),
         array('fetchGrid', 'fetchRow', 'selectFiles')
      );
 
      // Set grid title.
      $this->setTitle('submission.queries.attachedFiles');
   }
 
   function authorize($request, $args, $roleAssignments) {
      $stageId = $request->getUserVar('stageId'); // This is being validated in WorkflowStageAccessPolicy
      $this->_stageId = (int)$stageId;
 
      // Get the stage access policy
      import('lib.pkp.classes.security.authorization.QueryAccessPolicy');
      $queryAccessPolicy = new QueryAccessPolicy($request, $args, $roleAssignments, $stageId);
      $this->addPolicy($queryAccessPolicy);
      $result = parent::authorize($request, $args, $roleAssignments);
 
      if (0!=count(array_intersect(
         $this->getAuthorizedContextObject(ASSOC_TYPE_USER_ROLES),
         array(ROLE_ID_MANAGER, ROLE_ID_SUB_EDITOR, ROLE_ID_ASSISTANT)
      ))) {
         $this->getCapabilities()->setCanManage(true);
      }
 
      return $result;
   }
 
 
   //
   // Public handler methods
   //
   function selectFiles($args, $request) {
      $submission = $this->getSubmission();
      $query = $this->getAuthorizedContextObject(ASSOC_TYPE_QUERY);
 
      import('lib.pkp.controllers.grid.files.query.form.ManageQueryNoteFilesForm');
      $manageQueryNoteFilesForm = new ManageQueryNoteFilesForm($submission->getId(), $query->getId(), $request->getUserVar('noteId'), $this->getRequestArgs());
      $manageQueryNoteFilesForm->initData();
      return new JSONMessage(true, $manageQueryNoteFilesForm->fetch($request));
   }
}