Check that the permissions are really an array

This accounts for weird data in the permissions column
2025-10-30 13:34:50 +00:00
parent 07256fd833
commit fa98557225
1 changed files with 6 additions and 3 deletions
@@ -237,11 +237,14 @@ class User extends SnipeModel implements AuthenticatableContract, AuthorizableCo
            $permissions = json_decode($this->permissions, true);
        }

-        foreach ($permissions as $permission) {
-            if ($permission != 0) {
-                return true;
+        if (($permissions) && (is_array($permissions))) {
+            foreach ($permissions as $permission) {
+                if ($permission != 0) {
+                    return true;
+                }
            }
        }
+
        return false;
    }