API for retrieving files uploaded by reviewer

[jardakotesovec]

Describe the issue
While working on new submission listing. Having reviewer role I need to be able present files that has been uploaded by me (reviewer).

File that is uploaded by reviewer for given review are saved in submission_files table with SUBMISSION_FILE_REVIEW_ATTACHMENT = 5 fileStage. And are associated with given reviewAssignmentId (ASSOC_TYPE_REVIEW_ASSIGNMENT).

/submissions/{submissionId}/files currently supports filtering by fileStages and reviewRoundIds.

Proposed solution
Given that this file is associated via reviewAssignmentId, it would be probably easiest to retrieve it by adding reviewAssignmentId query param?

But no strong opinion particular solution as long as being reviewer I can retrieve these files.

What application are you using?
OJS, OMP or OPS version 3.5

Additional information

[Vitaliy-1]

I don't see that we expose review files for reviewers through API. Looking at the code for the submissions/{submissionId}/files endpoint, PKPSubmissionFileController::getMany(), It might require creation of a new endpoint - to not mixing the logic there. Maybe a new Policy, not sure if UserAccessibleWorkflowStageRequiredPolicy will work here. Looking into it...

[ewhanson]

I generally also like the idea of a new, review-centric endpoint. I imagine we will need more of those in the future and it would be good to start to build those out now rather than fit htem all into the existing submissions/{submissionId}/files endpoint.

[Vitaliy-1]

PR pkp-lib: #10112
tests: pkp/ojs#4335

[Vitaliy-1]

@ewhanson, can you take a look at this PR?
I've created a new endpoint and policy. Was looking at existing once, ReviewAssignmentAccessPolicy was pretty close but it derives data about reviewAssignment from the submission and this doesn't work here.