From af1431c02d5ebc1486c806f6916206d9bea00f00 Mon Sep 17 00:00:00 2001
From: jaasen-livefront <jaasen@livefront.com>
Date: Tue, 6 May 2025 17:15:26 -0700
Subject: [PATCH] fix AccessibleCiphers query

---
 .../SecurityTask_ReadByUserIdStatus.sql           | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/src/Sql/Vault/dbo/Stored Procedures/SecurityTask/SecurityTask_ReadByUserIdStatus.sql b/src/Sql/Vault/dbo/Stored Procedures/SecurityTask/SecurityTask_ReadByUserIdStatus.sql
index 30375abf4e..f7c75117e9 100644
--- a/src/Sql/Vault/dbo/Stored Procedures/SecurityTask/SecurityTask_ReadByUserIdStatus.sql	
+++ b/src/Sql/Vault/dbo/Stored Procedures/SecurityTask/SecurityTask_ReadByUserIdStatus.sql	
@@ -45,10 +45,19 @@ BEGIN
             AND CG.ReadOnly = 0
     ),
     AccessibleCiphers AS (
-        SELECT CipherId FROM UserCollectionAccess
+        SELECT CipherId
+        FROM UserCollectionAccess
+
         UNION ALL
-        SELECT CipherId FROM GroupCollectionAccess
-    ),
+
+        SELECT GC.CipherId
+        FROM GroupCollectionAccess AS GC
+        WHERE NOT EXISTS (
+            SELECT 1
+            FROM UserCollectionAccess AS UA
+            WHERE UA.CipherId = GC.CipherId
+        )
+    )
     SecurityTasks AS (
         SELECT
             ST.*