From afeef5c99e746ebce9aaf7176e9c60feee4dda6c Mon Sep 17 00:00:00 2001
From: Robin Appelman <robin@icewind.nl>
Date: Mon, 26 Feb 2024 14:48:29 +0100
Subject: [PATCH] fix: mask out rule permissions before merging permissions

Signed-off-by: Robin Appelman <robin@icewind.nl>
---
 lib/ACL/Rule.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/ACL/Rule.php b/lib/ACL/Rule.php
index a538f838b..a0245d0b2 100644
--- a/lib/ACL/Rule.php
+++ b/lib/ACL/Rule.php
@@ -51,7 +51,7 @@ public function __construct(IUserMapping $userMapping, int $fileId, int $mask, i
 		$this->userMapping = $userMapping;
 		$this->fileId = $fileId;
 		$this->mask = $mask;
-		$this->permissions = $permissions;
+		$this->permissions = $permissions & $mask;
 	}
 
 	public function getUserMapping(): IUserMapping {