fs: fix globSync traverse on allowed directory

Fix an issue where fs.globSync failed to find files when read access
was granted only for a certain directory via the --allow-fs-read flag.

Fixes: #61499

Author: artsiom-malakhau

lib/internal/fs/glob.js

@@ -408,7 +408,7 @@ class Glob {
       this.#results.add(path);
     }
 
-    if (!isDirectory) {
+    if (!isDirectory && stat !== null) {
       return;
     }
 

test/parallel/test-fs-glob-permission.js

@@ -0,0 +1,71 @@
+'use strict';
+
+require('../common');
+
+const assert = require('node:assert');
+const fs = require('node:fs');
+const path = require('node:path');
+
+const { spawnSyncAndAssert } = require('../common/child_process');
+const tmpdir = require('../common/tmpdir');
+
+// This test verifies that fs.globSync() works correctly udner permission model
+// when --allow-fs-read is granted only to the certain directory
+
+// Example:
+// Directory structure:
+//   somedir/
+//     file1.js
+//   sample.js
+//
+// Command:
+//   node --permission --allow-fs-read=somedir/ sample.js
+//
+// Code:
+//   fs.globSync('somedir/*') <- sould find file1.js
+
+tmpdir.refresh();
+
+const someDir = tmpdir.resolve('somedir');
+const script = tmpdir.resolve('sample.js');
+
+fs.mkdirSync(someDir);
+fs.writeFileSync(
+  path.join(someDir, 'file1.js'),
+  'console.log("test");'
+);
+
+fs.writeFileSync(
+  script,
+  `
+'use strict';
+const fs = require('fs');
+const matches = fs.globSync('somedir/*');
+console.log(JSON.stringify(matches));
+`
+);
+
+spawnSyncAndAssert(
+  process.execPath,
+  [
+    '--permission',
+    `--allow-fs-read=${someDir}`,
+    script,
+  ],
+  {
+    cwd: tmpdir.path,
+  },
+  {
+    stdout(output) {
+      assert.deepStrictEqual(
+        JSON.parse(output),
+        ['somedir/file1.js']
+      );
+      return true;
+    },
+    stderr(output) {
+      assert.doesNotMatch(output, /ERR_ACCESS_DENIED/);
+      return true;
+    },
+  }
+);