api/v1/submissions/PKPSubmissionHandler.inc.php

<?php
 
import('lib.pkp.classes.handler.APIHandler');
import('classes.core.Services');
 
class PKPSubmissionHandler extends APIHandler {
 
   public function __construct() {
      $this->_handlerPath = 'submissions';
      $this->_endpoints = [
         'GET' => [
            [
               'pattern' => $this->getEndpointPattern(),
               'handler' => [$this, 'getMany'],
               'roles' => [ROLE_ID_MANAGER, ROLE_ID_SUB_EDITOR, ROLE_ID_ASSISTANT, ROLE_ID_REVIEWER, ROLE_ID_AUTHOR],
            ],
            [
               'pattern' => $this->getEndpointPattern() . '/{submissionId}',
               'handler' => [$this, 'get'],
               'roles' => [ROLE_ID_MANAGER, ROLE_ID_SUB_EDITOR, ROLE_ID_ASSISTANT, ROLE_ID_REVIEWER, ROLE_ID_AUTHOR],
            ],
            [
               'pattern' => $this->getEndpointPattern() . '/{submissionId}/participants',
               'handler' => [$this, 'getParticipants'],
               'roles' => [ROLE_ID_MANAGER, ROLE_ID_SUB_EDITOR],
            ],
            [
               'pattern' => $this->getEndpointPattern() . '/{submissionId}/participants/{stageId}',
               'handler' => [$this, 'getParticipants'],
               'roles' => [ROLE_ID_MANAGER, ROLE_ID_SUB_EDITOR],
            ],
            [
               'pattern' => $this->getEndpointPattern() . '/{submissionId}/publications',
               'handler' => [$this, 'getPublications'],
               'roles' => [ROLE_ID_MANAGER, ROLE_ID_SUB_EDITOR, ROLE_ID_ASSISTANT, ROLE_ID_REVIEWER, ROLE_ID_AUTHOR],
            ],
            [
               'pattern' => $this->getEndpointPattern() . '/{submissionId}/publications/{publicationId}',
               'handler' => [$this, 'getPublication'],
               'roles' => [ROLE_ID_MANAGER, ROLE_ID_SUB_EDITOR, ROLE_ID_ASSISTANT, ROLE_ID_REVIEWER, ROLE_ID_AUTHOR],
            ],
         ],
         'POST' => [
            [
               'pattern' => $this->getEndpointPattern(),
               'handler' => [$this, 'add'],
               'roles' => [ROLE_ID_MANAGER, ROLE_ID_SUB_EDITOR],
            ],
            [
               'pattern' => $this->getEndpointPattern() . '/{submissionId}/publications',
               'handler' => [$this, 'addPublication'],
               'roles' => [ROLE_ID_MANAGER, ROLE_ID_SUB_EDITOR, ROLE_ID_ASSISTANT],
            ],
            [
               'pattern' => $this->getEndpointPattern() . '/{submissionId}/publications/{publicationId}/version',
               'handler' => [$this, 'versionPublication'],
               'roles' => [ROLE_ID_MANAGER, ROLE_ID_SUB_EDITOR, ROLE_ID_ASSISTANT],
            ],
         ],
         'PUT' => [
            [
               'pattern' => $this->getEndpointPattern() . '/{submissionId}',
               'handler' => [$this, 'edit'],
               'roles' => [ROLE_ID_MANAGER, ROLE_ID_SUB_EDITOR],
            ],
            [
               'pattern' => $this->getEndpointPattern() . '/{submissionId}/publications/{publicationId}',
               'handler' => [$this, 'editPublication'],
               'roles' => [ROLE_ID_MANAGER, ROLE_ID_SUB_EDITOR, ROLE_ID_ASSISTANT, ROLE_ID_AUTHOR],
            ],
            [
               'pattern' => $this->getEndpointPattern() . '/{submissionId}/publications/{publicationId}/publish',
               'handler' => [$this, 'publishPublication'],
               'roles' => [ROLE_ID_MANAGER, ROLE_ID_SUB_EDITOR, ROLE_ID_ASSISTANT],
            ],
            [
               'pattern' => $this->getEndpointPattern() . '/{submissionId}/publications/{publicationId}/unpublish',
               'handler' => [$this, 'unpublishPublication'],
               'roles' => [ROLE_ID_MANAGER, ROLE_ID_SUB_EDITOR, ROLE_ID_ASSISTANT],
            ],
         ],
         'DELETE' => [
            [
               'pattern' => $this->getEndpointPattern() . '/{submissionId}',
               'handler' => [$this, 'delete'],
               'roles' => [ROLE_ID_MANAGER, ROLE_ID_SUB_EDITOR],
            ],
            [
               'pattern' => $this->getEndpointPattern() . '/{submissionId}/publications/{publicationId}',
               'handler' => [$this, 'deletePublication'],
               'roles' => [ROLE_ID_MANAGER, ROLE_ID_SUB_EDITOR, ROLE_ID_ASSISTANT],
            ],
         ],
      ];
      parent::__construct();
   }
 
   //
   // Implement methods from PKPHandler
   //
   function authorize($request, &$args, $roleAssignments) {
      $routeName = $this->getSlimRequest()->getAttribute('route')->getName();
 
      import('lib.pkp.classes.security.authorization.ContextAccessPolicy');
      $this->addPolicy(new ContextAccessPolicy($request, $roleAssignments));
 
      $requiresSubmissionAccess = [
         'get',
         'edit',
         'delete',
         'getParticipants',
         'getPublications',
         'getPublication',
         'addPublication',
         'versionPublication',
         'editPublication',
         'publishPublication',
         'unpublishPublication',
         'deletePublication',
      ];
      if (in_array($routeName, $requiresSubmissionAccess)) {
         import('lib.pkp.classes.security.authorization.SubmissionAccessPolicy');
         $this->addPolicy(new SubmissionAccessPolicy($request, $args, $roleAssignments));
      }
 
      $requiresPublicationWriteAccess = [
         'editPublication',
      ];
      if (in_array($routeName, $requiresPublicationWriteAccess)) {
         import('lib.pkp.classes.security.authorization.PublicationWritePolicy');
         $this->addPolicy(new PublicationWritePolicy($request, $args, $roleAssignments));
      }
 
      $requiresProductionStageAccess = [
         'addPublication',
         'versionPublication',
         'publishPublication',
         'unpublishPublication',
         'deletePublication',
      ];
      if (in_array($routeName, $requiresProductionStageAccess)) {
         import('lib.pkp.classes.security.authorization.StageRolePolicy');
         $this->addPolicy(new StageRolePolicy([ROLE_ID_MANAGER, ROLE_ID_SUB_EDITOR, ROLE_ID_ASSISTANT], WORKFLOW_STAGE_ID_PRODUCTION, false));
      }
 
      return parent::authorize($request, $args, $roleAssignments);
   }
 
   public function getMany($slimRequest, $response, $args) {
      $request = Application::get()->getRequest();
      $currentUser = $request->getUser();
      $context = $request->getContext();
 
      if (!$context) {
         return $response->withStatus(404)->withJsonError('api.404.resourceNotFound');
      }
 
      $defaultParams = [
         'count' => 20,
         'offset' => 0,
      ];
 
      // Only admins and managers may access submissions they are not assigned to
      $userRoles = $this->getAuthorizedContextObject(ASSOC_TYPE_USER_ROLES);
      $canAccessUnassignedSubmission = !empty(array_intersect(array(ROLE_ID_SITE_ADMIN, ROLE_ID_MANAGER), $userRoles));
      if (!$canAccessUnassignedSubmission) {
         $defaultParams['assignedTo'] = [$currentUser->getId()];
      }
 
      $params = array_merge($defaultParams, $slimRequest->getQueryParams());
 
      foreach ($params as $param => $val) {
         switch ($param) {
            case 'orderBy':
               if (in_array($val, array('dateSubmitted', 'dateLastActivity', 'lastModified', 'title'))) {
                  $params[$param] = $val;
               }
               break;
 
            case 'orderDirection':
               $params[$param] = $val === 'ASC' ? $val : 'DESC';
               break;
 
            // Always convert status and stageIds to array
            case 'status':
            case 'stageIds':
            case 'assignedTo':
               if (is_string($val) && strpos($val, ',') > -1) {
                  $val = explode(',', $val);
               } elseif (!is_array($val)) {
                  $val = array($val);
               }
               $params[$param] = array_map('intval', $val);
               break;
 
            case 'daysInactive':
            case 'offset':
               $params[$param] = (int) $val;
               break;
 
            case 'searchPhrase':
               $params[$param] = $val;
               break;
 
            // Enforce a maximum count to prevent the API from crippling the
            // server
            case 'count':
               $params[$param] = min(100, (int) $val);
               break;
 
            case 'isIncomplete':
            case 'isOverdue':
               $params[$param] = true;
               break;
         }
      }
 
      $params['contextId'] = $request->getContext()->getId();
 
      \HookRegistry::call('API::submissions::params', array(&$params, $slimRequest));
 
      // Prevent users from viewing submissions they're not assigned to,
      // except for journal managers and admins.
      $userRoles = $this->getAuthorizedContextObject(ASSOC_TYPE_USER_ROLES);
      $canAccessUnassignedSubmission = !empty(array_intersect(array(ROLE_ID_SITE_ADMIN, ROLE_ID_MANAGER), $userRoles));
      if (!$canAccessUnassignedSubmission && !in_array($currentUser->getId(), $params['assignedTo'])) {
         return $response->withStatus(403)->withJsonError('api.submissions.403.requestedOthersUnpublishedSubmissions');
      }
 
      $items = [];
      $submissionsIterator = Services::get('submission')->getMany($params);
      if (count($submissionsIterator)) {
         $userGroupDao = DAORegistry::getDAO('UserGroupDAO'); /* @var $userGroupDao UserGroupDAO */
         $propertyArgs = [
            'request' => $request,
            'slimRequest' => $slimRequest,
            'userGroups' => $userGroupDao->getByContextId($context->getId())->toArray()
         ];
         foreach ($submissionsIterator as $submission) {
            $items[] = Services::get('submission')->getSummaryProperties($submission, $propertyArgs);
         }
      }
 
      $data = [
         'itemsMax' => Services::get('submission')->getMax($params),
         'items' => $items,
      ];
 
      return $response->withJson($data, 200);
   }
 
   public function get($slimRequest, $response, $args) {
      AppLocale::requireComponents(LOCALE_COMPONENT_PKP_READER, LOCALE_COMPONENT_PKP_SUBMISSION);
 
      $request = Application::get()->getRequest();
      $submission = $this->getAuthorizedContextObject(ASSOC_TYPE_SUBMISSION);
      $userGroupDao = DAORegistry::getDAO('UserGroupDAO'); /* @var $userGroupDao UserGroupDAO */
 
      $data = Services::get('submission')->getFullProperties($submission, array(
         'request' => $request,
         'slimRequest'  => $slimRequest,
         'userGroups' => $userGroupDao->getByContextId($submission->getData('contextId'))->toArray(),
      ));
 
      return $response->withJson($data, 200);
   }
 
   public function add($slimRequest, $response, $args) {
      $request = $this->getRequest();
 
      // Don't allow submissions to be added via the site-wide API
      if (!$request->getContext()) {
         return $response->withStatus(400)->withJsonError('api.submissions.403.contextRequired');
      }
 
      $params = $this->convertStringsToSchema(SCHEMA_SUBMISSION, $slimRequest->getParsedBody());
      $params['contextId'] = $request->getContext()->getId();
 
      $primaryLocale = $request->getContext()->getPrimaryLocale();
      $allowedLocales = $request->getContext()->getData('supportedSubmissionLocales');
 
      $errors = Services::get('submission')->validate(VALIDATE_ACTION_ADD, $params, $allowedLocales, $primaryLocale);
 
      if (!empty($errors)) {
         return $response->withStatus(400)->withJson($errors);
      }
 
      $submissionDao = DAORegistry::getDAO('SubmissionDAO'); /* @var $submissionDao SubmissionDAO */
      $submission = $submissionDao->newDataObject();
      $submission->_data = $params;
      $submission = Services::get('submission')->add($submission, $request);
      $userGroupDao = DAORegistry::getDAO('UserGroupDAO'); /* @var $userGroupDao UserGroupDAO */
 
      $data = Services::get('submission')->getFullProperties($submission, [
         'request' => $request,
         'slimRequest'  => $slimRequest,
         'userGroups' => $userGroupDao->getByContextId($submission->getData('contextId'))->toArray(),
      ]);
 
      return $response->withJson($data, 200);
   }
 
   public function edit($slimRequest, $response, $args) {
      $request = $this->getRequest();
      $submission = $this->getAuthorizedContextObject(ASSOC_TYPE_SUBMISSION);
 
      if (!$submission) {
         return $response->withStatus(404)->withJsonError('api.404.resourceNotFound');
      }
 
      // Don't allow submissions to be added via the site-wide API
      if (!$request->getContext()) {
         return $response->withStatus(403)->withJsonError('api.submissions.403.contextRequired');
      }
 
      $params = $this->convertStringsToSchema(SCHEMA_SUBMISSION, $slimRequest->getParsedBody());
      $params['id'] = $submission->getId();
      $params['contextId'] = $request->getContext()->getId();
 
      // Don't allow a submission's context to be changed
      if (isset($params['contextId']) && $params['contextId'] !== $submission->getData('contextId')) {
         return $response->withStatus(403)->withJsonError('api.submissions.403.cantChangeContext');
      }
 
      $primaryLocale = $request->getContext()->getPrimaryLocale();
      $allowedLocales = $request->getContext()->getData('supportedSubmissionLocales');
 
      $errors = Services::get('submission')->validate(VALIDATE_ACTION_EDIT, $params, $allowedLocales, $primaryLocale);
 
      if (!empty($errors)) {
         return $response->withStatus(400)->withJson($errors);
      }
 
      $submission = Services::get('submission')->edit($submission, $params, $request);
      $userGroupDao = DAORegistry::getDAO('UserGroupDAO'); /* @var $userGroupDao UserGroupDAO */
 
      $data = Services::get('submission')->getFullProperties($submission, [
         'request' => $request,
         'slimRequest'  => $slimRequest,
         'userGroups' => $userGroupDao->getByContextId($submission->getData('contextId'))->toArray(),
      ]);
 
      return $response->withJson($data, 200);
   }
 
   public function delete($slimRequest, $response, $args) {
      $request = $this->getRequest();
      $submission = $this->getAuthorizedContextObject(ASSOC_TYPE_SUBMISSION);
 
      if (!$submission) {
         return $response->withStatus(404)->withJsonError('api.404.resourceNotFound');
      }
 
      $userGroupDao = DAORegistry::getDAO('UserGroupDAO'); /* @var $userGroupDao UserGroupDAO */
      $submissionProps = Services::get('submission')->getFullProperties($submission, [
         'request' => $request,
         'slimRequest'  => $slimRequest,
         'userGroups' => $userGroupDao->getByContextId($submission->getData('contextId'))->toArray(),
      ]);
 
      Services::get('submission')->delete($submission);
 
      return $response->withJson($submissionProps, 200);
   }
 
   public function getParticipants($slimRequest, $response, $args) {
      $request = Application::get()->getRequest();
      $context = $request->getContext();
      $submission = $this->getAuthorizedContextObject(ASSOC_TYPE_SUBMISSION);
      $stageId = isset($args['stageId']) ? $args['stageId'] : null;
 
      if (!$submission) {
         return $response->withStatus(404)->withJsonError('api.404.resourceNotFound');
      }
 
      $data = array();
 
      $userService = Services::get('user');
 
      $usersIterator = $userService->getMany(array(
         'contextId' => $context->getId(),
         'assignedToSubmission' => $submission->getId(),
         'assignedToSubmissionStage' => $stageId,
      ));
      if (count($usersIterator)) {
         $args = array(
            'request' => $request,
            'slimRequest' => $slimRequest,
         );
         foreach ($usersIterator as $user) {
            $data[] = $userService->getSummaryProperties($user, $args);
         }
      }
 
      return $response->withJson($data, 200);
   }
 
 
   public function getPublications($slimRequest, $response, $args) {
      $request = $this->getRequest();
 
      $submission = $this->getAuthorizedContextObject(ASSOC_TYPE_SUBMISSION);
 
      if (!$submission) {
         return $response->withStatus(404)->withJsonError('api.404.resourceNotFound');
      }
 
      $args = [
         'submissionIds' => $submission->getId()
      ];
 
      $userGroupDao = DAORegistry::getDAO('UserGroupDAO'); /* @var $userGroupDao UserGroupDAO */
      $userGroups = $userGroupDao->getByContextId($submission->getData('contextId'))->toArray();
 
      $items = [];
      $publicationsIterator = Services::get('publication')->getMany($args);
      foreach ($publicationsIterator as $publication) {
         $items[] = Services::get('publication')->getSummaryProperties(
            $publication,
            [
               'request' => $request,
               'submission' => $submission,
               'userGroups' => $userGroups,
            ]
         );
      }
 
      $data = [
         'itemsMax' => Services::get('publication')->getMax($args),
         'items' => $items,
      ];
 
      return $response->withJson($data, 200);
   }
 
   public function getPublication($slimRequest, $response, $args) {
      $request = $this->getRequest();
      $submission = $this->getAuthorizedContextObject(ASSOC_TYPE_SUBMISSION);
 
      $publication = Services::get('publication')->get((int) $args['publicationId']);
 
      if (!$publication) {
         return $response->withStatus(404)->withJsonError('api.404.resourceNotFound');
      }
 
      if ($submission->getId() !== $publication->getData('submissionId')) {
         return $response->withStatus(403)->withJsonError('api.publications.403.submissionsDidNotMatch');
      }
 
      $userGroupDao = DAORegistry::getDAO('UserGroupDAO'); /* @var $userGroupDao UserGroupDAO */
      $data = Services::get('publication')->getFullProperties(
         $publication,
         [
            'request' => $request,
            'userGroups' => $userGroupDao->getByContextId($submission->getData('contextId'))->toArray(),
         ]
      );
 
      return $response->withJson($data, 200);
   }
 
   public function addPublication($slimRequest, $response, $args) {
      $request = $this->getRequest();
      $submission = $this->getAuthorizedContextObject(ASSOC_TYPE_SUBMISSION);
 
      $params = $this->convertStringsToSchema(SCHEMA_PUBLICATION, $slimRequest->getParsedBody());
      $params['submissionId'] = $submission->getId();
 
      $submissionContext = $request->getContext();
      if (!$submissionContext || $submissionContext->getId() !== $submission->getData('contextId')) {
         $submissionContext = Services::get('context')->get($submission->getData('contextId'));
      }
      $primaryLocale = $submissionContext->getPrimaryLocale();
      $allowedLocales = $submissionContext->getData('supportedSubmissionLocales');
 
      // A publication may have a different primary locale
      if (!empty($params['locale']) && in_array($params['locale'], $allowedLocales)) {
         $primaryLocale = $params['locale'];
      }
 
      $errors = Services::get('publication')->validate(VALIDATE_ACTION_ADD, $params, $allowedLocales, $primaryLocale);
 
      if (!empty($errors)) {
         return $response->withStatus(400)->withJson($errors);
      }
 
      $publicationDao = DAORegistry::getDAO('PublicationDAO'); /* @var $publicationDao PublicationDAO */
      $userGroupDao = DAORegistry::getDAO('UserGroupDAO'); /* @var $userGroupDao UserGroupDAO */
      $publication = $publicationDao->newDataObject();
      $publication->_data = $params;
      $publication = Services::get('publication')->add($publication, $request);
      $publicationProps = Services::get('publication')->getFullProperties(
         $publication,
         [
            'request' => $request,
            'userGroups' => $userGroupDao->getByContextId($submission->getData('contextId'))->toArray(),
         ]
      );
 
      return $response->withJson($publicationProps, 200);
   }
 
   public function versionPublication($slimRequest, $response, $args) {
      $request = $this->getRequest();
      $submission = $this->getAuthorizedContextObject(ASSOC_TYPE_SUBMISSION);
      $publication = Services::get('publication')->get((int) $args['publicationId']);
 
      if (!$publication) {
         return $response->withStatus(404)->withJsonError('api.404.resourceNotFound');
      }
 
      if ($submission->getId() !== $publication->getData('submissionId')) {
         return $response->withStatus(403)->withJsonError('api.publications.403.submissionsDidNotMatch');
      }
 
      $publication = Services::get('publication')->version($publication, $request);
      $userGroupDao = DAORegistry::getDAO('UserGroupDAO'); /* @var $userGroupDao UserGroupDAO */
 
      $publicationProps = Services::get('publication')->getFullProperties(
         $publication,
         [
            'request' => $request,
            'userGroups' => $userGroupDao->getByContextId($submission->getData('contextId'))->toArray(),
         ]
      );
 
      $notificationManager = new NotificationManager();
      $userService = Services::get('user');
      $usersIterator = $userService->getMany(array(
         'contextId' => $submission->getContextId(),
         'assignedToSubmission' => $submission->getId(),
      ));
 
      foreach ($usersIterator as $user) {
         $notificationManager->createNotification(
            $request,
            $user->getId(),
            NOTIFICATION_TYPE_SUBMISSION_NEW_VERSION,
            $submission->getContextId(),
            ASSOC_TYPE_SUBMISSION,
            $submission->getId(),
            NOTIFICATION_LEVEL_TASK
         );
      }
 
      return $response->withJson($publicationProps, 200);
   }
 
   public function editPublication($slimRequest, $response, $args) {
      $request = $this->getRequest();
      $submission = $this->getAuthorizedContextObject(ASSOC_TYPE_SUBMISSION);
      $currentUser = $request->getUser();
      $publication = Services::get('publication')->get((int) $args['publicationId']);
 
      if (!$publication) {
         return $response->withStatus(404)->withJsonError('api.404.resourceNotFound');
      }
 
      if ($submission->getId() !== $publication->getData('submissionId')) {
         return $response->withStatus(403)->withJsonError('api.publications.403.submissionsDidNotMatch');
      }
 
      // Publications can not be edited when they are published
      if ($publication->getData('status') === STATUS_PUBLISHED) {
         return $response->withStatus(403)->withJsonError('api.publication.403.cantEditPublished');
      }
 
      // Prevent users from editing publications if they do not have permission. Except for admins.
      $userRoles = $this->getAuthorizedContextObject(ASSOC_TYPE_USER_ROLES);
      if (!in_array(ROLE_ID_SITE_ADMIN, $userRoles) && !Services::get('submission')->canEditPublication($submission->getId(), $currentUser->getId())) {
         return $response->withStatus(403)->withJsonError('api.submissions.403.userCantEdit');
      }
 
      $params = $this->convertStringsToSchema(SCHEMA_PUBLICATION, $slimRequest->getParsedBody());
      $params['id'] = $publication->getId();
 
      // Don't allow the status to be modified through the API. The `/publish` and /unpublish endpoints
      // should be used instead.
      if (array_key_exists('status', $params)) {
         return $response->withStatus(403)->withJsonError('api.publication.403.cantEditStatus');
      }
 
      $submissionContext = $request->getContext();
      if (!$submissionContext || $submissionContext->getId() !== $submission->getData('contextId')) {
         $submissionContext = Services::get('context')->get($submission->getData('contextId'));
      }
      $primaryLocale = $publication->getData('locale');
      $allowedLocales = $submissionContext->getData('supportedSubmissionLocales');
 
      $errors = Services::get('publication')->validate(VALIDATE_ACTION_EDIT, $params, $allowedLocales, $primaryLocale);
 
      if (!empty($errors)) {
         return $response->withStatus(400)->withJson($errors);
      }
 
      $publication = Services::get('publication')->edit($publication, $params, $request);
      $userGroupDao = DAORegistry::getDAO('UserGroupDAO'); /* @var $userGroupDao UserGroupDAO */
 
      $publicationProps = Services::get('publication')->getFullProperties(
         $publication,
         [
            'request' => $request,
            'userGroups' => $userGroupDao->getByContextId($submission->getData('contextId'))->toArray(),
         ]
      );
 
      return $response->withJson($publicationProps, 200);
   }
 
   public function publishPublication($slimRequest, $response, $args) {
      $request = $this->getRequest();
      $submission = $this->getAuthorizedContextObject(ASSOC_TYPE_SUBMISSION);
      $publication = Services::get('publication')->get((int) $args['publicationId']);
 
      if (!$publication) {
         return $response->withStatus(404)->withJsonError('api.404.resourceNotFound');
      }
 
      if ($submission->getId() !== $publication->getData('submissionId')) {
         return $response->withStatus(403)->withJsonError('api.publications.403.submissionsDidNotMatch');
      }
 
      if ($publication->getData('status') === STATUS_PUBLISHED) {
         return $response->withStatus(403)->withJsonError('api.publication.403.alreadyPublished');
      }
 
      AppLocale::requireComponents(LOCALE_COMPONENT_PKP_SUBMISSION, LOCALE_COMPONENT_APP_SUBMISSION);
 
      $submissionContext = $request->getContext();
      if (!$submissionContext || $submissionContext->getId() !== $submission->getData('contextId')) {
         $submissionContext = Services::get('context')->get($submission->getData('contextId'));
      }
      $primaryLocale = $submission->getData('locale');
      $allowedLocales = $submissionContext->getData('supportedSubmissionLocales');
 
      $errors = Services::get('publication')->validatePublish($publication, $submission, $allowedLocales, $primaryLocale);
 
      if (!empty($errors)) {
         return $response->withStatus(400)->withJson($errors);
      }
 
      $publication = Services::get('publication')->publish($publication);
      $userGroupDao = DAORegistry::getDAO('UserGroupDAO'); /* @var $userGroupDao UserGroupDAO */
 
      $publicationProps = Services::get('publication')->getFullProperties(
         $publication,
         [
            'request' => $request,
            'userGroups' => $userGroupDao->getByContextId($submission->getData('contextId'))->toArray(),
         ]
      );
 
      return $response->withJson($publicationProps, 200);
   }
 
   public function unpublishPublication($slimRequest, $response, $args) {
      $request = $this->getRequest();
      $submission = $this->getAuthorizedContextObject(ASSOC_TYPE_SUBMISSION);
      $publication = Services::get('publication')->get((int) $args['publicationId']);
 
      if (!$publication) {
         return $response->withStatus(404)->withJsonError('api.404.resourceNotFound');
      }
 
      if ($submission->getId() !== $publication->getData('submissionId')) {
         return $response->withStatus(403)->withJsonError('api.publications.403.submissionsDidNotMatch');
      }
 
      if (!in_array($publication->getData('status'), [STATUS_PUBLISHED, STATUS_SCHEDULED])) {
         return $response->withStatus(403)->withJsonError('api.publication.403.alreadyUnpublished');
      }
 
      $publication = Services::get('publication')->unpublish($publication);
      $userGroupDao = DAORegistry::getDAO('UserGroupDAO'); /* @var $userGroupDao UserGroupDAO */
 
      $publicationProps = Services::get('publication')->getFullProperties(
         $publication,
         [
            'request' => $request,
            'userGroups' => $userGroupDao->getByContextId($submission->getData('contextId'))->toArray(),
         ]
      );
 
      return $response->withJson($publicationProps, 200);
   }
 
   public function deletePublication($slimRequest, $response, $args) {
      $request = $this->getRequest();
      $submission = $this->getAuthorizedContextObject(ASSOC_TYPE_SUBMISSION);
      $publication = Services::get('publication')->get((int) $args['publicationId']);
 
      if (!$publication) {
         return $response->withStatus(404)->withJsonError('api.404.resourceNotFound');
      }
 
      if ($submission->getId() !== $publication->getData('submissionId')) {
         return $response->withStatus(403)->withJsonError('api.publications.403.submissionsDidNotMatch');
      }
 
      if ($publication->getData('status') === STATUS_PUBLISHED) {
         return $response->withStatus(403)->withJsonError('api.publication.403.cantDeletePublished');
      }
 
      $userGroupDao = DAORegistry::getDAO('UserGroupDAO'); /* @var $userGroupDao UserGroupDAO */
      $publicationProps = Services::get('publication')->getFullProperties(
         $publication,
         [
            'request' => $request,
            'userGroups' => $userGroupDao->getByContextId($submission->getData('contextId'))->toArray(),
         ]
      );
 
      Services::get('publication')->delete($publication);
 
      return $response->withJson($publicationProps, 200);
   }
}