[FIX] Permission check on joinRoom for private room (#11857)

RocketChat · Sep 11, 2018 · 29af762 · 29af762
1 parent 6c3c379
commit 29af762
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/rocketchat-lib/server/methods/joinRoom.js b/packages/rocketchat-lib/server/methods/joinRoom.js
@@ -21,7 +21,7 @@ Meteor.methods({
 				throw new Meteor.Error('error-not-allowed', 'Token required', { method: 'joinRoom' });
 			}
 		} else {
-			if ((room.t !== 'c') || (RocketChat.authz.hasPermission(Meteor.userId(), 'view-c-room') !== true)) {
+			if (!RocketChat.authz.canAccessRoom(room, Meteor.user())) {
 				throw new Meteor.Error('error-not-allowed', 'Not allowed', { method: 'joinRoom' });
 			}