Editing Security.pl (section)

== can_user_view_document ==
This function determines if a specific user can access a particular document.  The default function will do the following:
# If the document is public and the eprint is in the live archive and returns ''ALLOW'' if that is the case.
# If the document is not public or the eprint is not in the live archive, returns ''DENY'' if the user is of type ''minuser''
# Returns ''ALLOW'' if the document security is ''validuser'' and the logged in user is not of type ''minuser'' and the eprint is in the live archive.
# Returns ''ALLOW'' if the document security is ''staffonly'' or the eprint is not in the live archive but the user is of type ''editor'' or ''admin'' or is the depositing user.
If none of these criteria are met ''DENY'' is returned.