it seems that we may have discovered a rather serious bug in OJS 3.0.2 review workflow:
We have a review workflow set to “Reviewers will have access to the submission file only after agreeing to review it”.
However, after declining the review request, reviewer gains access to article files and the backend looks as if he accepted the review request (file access, review form active, etc.). At the same moment, editor receives his decline (is informed that the reviewer declined the request).
As far as we’re aware - after declining the request, reviewer shouldn’t see files for review.
We have a training with journal crew undergoing right now so I can’t modify files but after it’s finished I’ll check if your mod fixes the issue completely and will get back with more info.
you just need to clear ojs cache as well. I did a little testing with a local server and seemed to work for me. PKP will check the pull request when they get the chance.
@ajnyga, thanks for jumping onto this. Your PR is partially effective, but doesn’t prevent back-end access to the review – it just stops it from being prevented on the front end. I’ll pull your commit into a larger PR that should remove the back-end access points as well.
Thanks, both, for your efforts on this!
Regards,
Alec Smecher
Public Knowledge Project Team