Maybe also another idea, we could search for the broken tokens:
Search for broken tokens
root> zammad run rails r 'pp Token.all.select{|t| !t.preferences["permission"].is_a?(Array) }'
Autofix
I tried to give an autofix a shot, this command will try to autofix user 3,4
root> zammad run rails c
rails> Token.where(user_id: [3,4]).select {|t| !t.preferences['permission'].is_a?(Array) }.each{|t| t.preferences['permission'] = t.preferences['permission'].gsub(/[\[\]]/, '').split(/\s*,\s*/); t.save! }