you will have to relax the rules inside PKPSubmissionAccessPolicy also, so not logged in users will still have a chance to access the submission. See line 90.

Also, I think that we can change this into lib, because the other systems can also benefit from this in the future.