SQL becomes invalid when user has no permissions

This is a bit vague as a bug report, because I don't really know what this module does. All I know is that it is breaking my clients cron jobs when it hits a fatal error.

The patch provided tests that the user being queried actually has roles before it goes trying to grab their permissions. If the user had no roles, then the SQL "IN" part would be empty.