fix: let users edit faqs that are permitted to only one group

thorsten · Jan 18, 2025 · 9152b26 · 9152b26
1 parent 0cec80c
commit 9152b26
Showing 1 changed file with 26 additions and 10 deletions.
diff --git a/phpmyfaq/src/phpMyFAQ/Faq/Permission.php b/phpmyfaq/src/phpMyFAQ/Faq/Permission.php
@@ -139,23 +139,39 @@ public function createPermissionArray(): array
                 'restricted_user' => [-1],
             ];
         } else {
-            $permissions += [
-                'restricted_user' => [
-                    Filter::filterVar($data->restricted_users, FILTER_VALIDATE_INT),
-                ],
-            ];
+            if (is_string($data->restricted_users)) {
+                $permissions += [
+                    'restricted_user' => [
+                        Filter::filterVar(array($data->restricted_users), FILTER_VALIDATE_INT),
+                    ],
+                ];
+            } else {
+                $permissions += [
+                    'restricted_user' => [
+                        Filter::filterVar($data->restricted_users, FILTER_VALIDATE_INT),
+                    ],
+                ];
+            }
         }
 
         if ('all' === Filter::filterVar($data->grouppermission, FILTER_SANITIZE_SPECIAL_CHARS)) {
             $permissions += [
                 'restricted_groups' => [-1],
             ];
         } else {
-            $permissions += [
-                'restricted_groups' => [
-                    Filter::filterArray($data->{'restricted_groups'}, FILTER_VALIDATE_INT),
-                ]
-            ];
+            if (is_string($data->restricted_groups)) {
+                $permissions += [
+                    'restricted_groups' => [
+                        Filter::filterVar(array($data->restricted_groups), FILTER_VALIDATE_INT),
+                    ]
+                ];
+            } else {
+                $permissions += [
+                    'restricted_groups' => [
+                        Filter::filterArray($data->restricted_groups, FILTER_VALIDATE_INT),
+                    ]
+                ];
+            }
         }
 
         return $permissions;