SubmissionFileStageRequiredPolicy.inc.php

<?php
import('lib.pkp.classes.security.authorization.internal.SubmissionFileBaseAccessPolicy');
 
class SubmissionFileStageRequiredPolicy extends SubmissionFileBaseAccessPolicy {
   var $_fileStage;
 
   var $_viewable;
 
   function __construct($request, $fileIdAndRevision, $fileStage, $viewable = false) {
      parent::__construct($request, $fileIdAndRevision);
      $this->_fileStage = $fileStage;
      $this->_viewable = $viewable;
   }
 
 
   //
   // Implement template methods from AuthorizationPolicy
   //
   function effect() {
      $request = $this->getRequest();
 
      // Get the submission file.
      $submissionFile = $this->getSubmissionFile($request);
      if (!is_a($submissionFile, 'SubmissionFile')) return AUTHORIZATION_DENY;
 
      // Make sure that it's in the required stage
      if ($submissionFile->getFileStage() != $this->_fileStage) return AUTHORIZATION_DENY;
 
      if ($this->_viewable) {
         // Make sure the file is visible. Unless file is included in an open review.
         if (!$submissionFile->getViewable()){
            if ($submissionFile->getAssocType() === ASSOC_TYPE_REVIEW_ASSIGNMENT){
               $reviewAssignmentDao = DAORegistry::getDAO('ReviewAssignmentDAO'); /* @var $reviewAssignmentDao ReviewAssignmentDAO */
               $reviewAssignment = $reviewAssignmentDao->getById((int) $submissionFile->getAssocId());
               if ($reviewAssignment->getReviewMethod() != SUBMISSION_REVIEW_METHOD_OPEN){
                  return AUTHORIZATION_DENY;
               }
            }
            else{
               return AUTHORIZATION_DENY;
            }
         }
      }
 
      // Made it through -- permit access.
      return AUTHORIZATION_PERMIT;
   }
}