diff --git a/library/Icinga/User.php b/library/Icinga/User.php
index 0d237831d..ef5a0ff62 100644
--- a/library/Icinga/User.php
+++ b/library/Icinga/User.php
@@ -579,7 +579,7 @@ class User
                 $wildcard = strpos($grantedPermission, '*');
             }
 
-            if ($wildcard !== false) {
+            if ($wildcard !== false && $wildcard > 0) {
                 if (substr($requiredPermission, 0, $wildcard) === substr($grantedPermission, 0, $wildcard)) {
                     return true;
                 }