From 22dd9f9c07704b7a50a4a695300bc6a36779bf0e Mon Sep 17 00:00:00 2001
From: Jeppe B <2jepp9350@gmail.com>
Date: Mon, 1 Jun 2026 22:34:45 +0200
Subject: [PATCH] Fix subuser permission checks to use resolved customer
 context

---
 services/nginx/app/traits/route_t.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/services/nginx/app/traits/route_t.php b/services/nginx/app/traits/route_t.php
index b5d0e587..b84811ba 100644
--- a/services/nginx/app/traits/route_t.php
+++ b/services/nginx/app/traits/route_t.php
@@ -356,7 +356,7 @@ trait route_t
                     if ($cached !== null) {
                         self::$__perm_subuser_grant_cache[$cacheKey] = $cached;
                     } else {
-                        $subuser_has_permission = $subuser->hasPermission($permission->subusers_node_key);
+                        $subuser_has_permission = $subuser->hasPermission($permission->subusers_node_key, (int)$resolvedCustomer);
                         if (defined('redis')) {
                             redis->cache_permission($cacheKey, $subuser_has_permission);
                         }
@@ -816,4 +816,4 @@ trait route_t
         // Check if route is the same, or if it matches the regex pattern
         return $route === $this->route || preg_match($route, $this->route);
     }
-}
\ No newline at end of file
+}