diff --git a/Router/WebRouter.php b/Router/WebRouter.php index 823c6129a..84c379302 100644 --- a/Router/WebRouter.php +++ b/Router/WebRouter.php @@ -161,8 +161,8 @@ final class WebRouter implements RouterInterface } // if permission check is invalid - if ((isset($d['permission']) && $account === null) - || (isset($d['permission']) + if ((isset($d['permission']) && !empty($d['permission']) && $account === null) + || (isset($d['permission']) && !empty($d['permission']) && !$account?->hasPermission( $d['permission']['type'] ?? 0, $d['permission']['unit'] ?? $orgId,