Property "permission" in slash commands of custom apps

[ifantom]

Description:

ISlashCommand interface has "permission" property

But if you mention some permission client without mentioned permission can use this command.
This property isn't used in registration of commands for custom apps.

Rocket.Chat/app/apps/server/bridges/commands.js

Line 88 in 132ed10

registerCommand(command, appId) {

But this property is used in default commands registration.

Rocket.Chat/app/utils/lib/slashCommand.js

Line 7 in 132ed10

slashCommands.add = function _addingSlashCommand(command, callback, options = {}, result, providesPreview = false, previewer, previewCallback) {

Steps to reproduce:

1. Create custom application
2. Add custom slash command for created application with permission property
3. Disable mentioned permission for client
4. Use created command by client without mentioned permission

Expected behavior:

You can't use the command

Actual behavior:

You can use the command.

Server Setup Information:

• Version of Rocket.Chat Server: 1.2.0