From c5f0ef9d4d16229c4e2004a697f33b39478665a2 Mon Sep 17 00:00:00 2001
From: Agent Zero <agent@media-on.de>
Date: Thu, 30 Jul 2026 01:44:50 +0200
Subject: [PATCH] fix: canAccess returns true while permissions are loading

---
 frontend/src/components/layout/Sidebar.tsx | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/frontend/src/components/layout/Sidebar.tsx b/frontend/src/components/layout/Sidebar.tsx
index d32a38d..eea57cc 100644
--- a/frontend/src/components/layout/Sidebar.tsx
+++ b/frontend/src/components/layout/Sidebar.tsx
@@ -50,6 +50,8 @@ export function Sidebar() {
   // Use hasPermission directly — permissions are loaded via useUserPermissions hook
   const canAccess = (perm?: string): boolean => {
     if (!perm) return true;
+    // While permissions are loading, show everything (backend 403 catches errors)
+    if (!user || (user.permissions?.length === 0 && user.is_system_admin === undefined)) return true;
     return hasPermission(perm);
   };