security.pl should check for does_user_own_eprint hook and call it

[tmb]

security.pl only checks user.userid == eprint.userid

Should also check does_user_own_eprint hook exists and call it if it does (someone other than the depositor might "own" the eprint).

[tmb]

# ...as can the user who deposited it... if( $user->get_value( "userid" ) == $eprint->get_value( "userid" ) ) {

return "ALLOW";

}

# NEW CHECK my $fn = $doc->get_session->get_repository->get_conf( "does_user_own_eprint" ); if( defined $fn ) {

return "ALLOW" if &$fn( $doc->get_session, $user, $eprint );

}

[sf03r@…]

resolved in r5759