Implement roles and permissions for non-admin users
The following roles exist in the system:
- Managing Editor (ME)
- Senior Editor (SE)
- Handling Editor (HE)
- Reviewer
- Author
Users should be able to "wear multiple hats", ie. be an author of a paper and a reviewer of another, or be an editor of a paper and an author of another etc.
Dashboard
MEs can see everything (under "My Manuscripts")
SEs & HEs can only see papers that they are assigned to (under "My Manuscripts")
Authors can only see the papers they've submitted (under "My Submissions")
Reviewers can only see the papers that they've been asked to review (under "My Reviews")
Note that all editors can assign a paper to a senior editor or handling editor
Submission page
Editors can see the submission page
Authors can only see the submission page if it is one of their submissions
Reviewers can never see the submission page
Note that once a submission has been actually submitted, the submission should be read-only for the author.
Review page
Editors can view the review page
Authors can never see the review page
Reviewers can see the review page for papers they've been assigned to, but only for their instance of the review, ie. they cannot see another user's review of the same paper, even though they've been assigned to it
Decision page
Editors can view the decision page
Authors can never view the decision page
Reviewers can never see the decision page
Manuscript page (Wax)
Editors can view the manuscript page
Authors can view the manuscript page of their own submissions. If a paper has not been submitted, they should be able to edit it as well.
Reviewers cannot view the manuscript page