User with no write rules in broadcast channel can start jitsi video call


a user can start jitsi in a broadcast room, thats absolut not cool for us ^^

Server Setup Information

  • Version of Rocket.Chat Server: 3.2.2
  • Operating System: Linux
  • Deployment Method: snap
  • Number of Running Instances: 1
  • DB Replicaset Oplog:
  • NodeJS Version: v12.16.1
  • MongoDB Version: 3.6.14
  • Proxy: no
  • Firewalls involved: pfsense