From 7a6b765f59a01736568ac00f552e361dc82a9e11 Mon Sep 17 00:00:00 2001
From: Johannes Zellner <johannes@cloudron.io>
Date: Fri, 9 Jul 2021 13:25:27 +0200
Subject: [PATCH] Prevent crash if groupIds is not set

---
 src/apps.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/apps.js b/src/apps.js
index 7eb6a5694..5848131b2 100644
--- a/src/apps.js
+++ b/src/apps.js
@@ -484,7 +484,7 @@ function hasAccessTo(app, user, callback) {
 
     if (!app.accessRestriction.groups) return callback(null, false);
 
-    if (app.accessRestriction.groups.some(function (gid) { return user.groupIds.indexOf(gid) !== -1; })) return callback(null, true);
+    if (app.accessRestriction.groups.some(function (gid) { return Array.isArray(user.groupIds) && user.groupIds.indexOf(gid) !== -1; })) return callback(null, true);
 
     callback(null, false);
 }