fix: multilevel permissions in can() method

refactor authorization checks to support nested permissions in can()
codeigniter4 · Nov 14, 2024 · ec8b41e · ec8b41e
1 parent 8a77efd
commit ec8b41e
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/src/Authorization/Traits/Authorizable.php b/src/Authorization/Traits/Authorizable.php
@@ -287,7 +287,7 @@ public function can(string ...$permissions): bool
                     $check    = implode('.', array_slice($parts, 0, $i)) . '.*';
                     $checks[] = $check;
                 }
-                if (isset($matrix[$group]) && array_intersect($checks, $matrix[$group])) {
+                if (isset($matrix[$group]) && array_intersect($checks, $matrix[$group]) !== []) {
                     return true;
                 }
             }

diff --git a/src/Entities/Group.php b/src/Entities/Group.php
@@ -95,7 +95,7 @@ public function can(string $permission): bool
 
         return $this->permissions !== null
             && $this->permissions !== []
-            && ! empty(array_intersect($checks, $this->permissions));
+            && array_intersect($checks, $this->permissions) !== [];
     }
 
     /**