diff --git a/packages/rocketchat-authorization/server/functions/canAccessRoom.js b/packages/rocketchat-authorization/server/functions/canAccessRoom.js index e010678f67a..916c9a06b3d 100644 --- a/packages/rocketchat-authorization/server/functions/canAccessRoom.js +++ b/packages/rocketchat-authorization/server/functions/canAccessRoom.js @@ -1,7 +1,10 @@ /* globals RocketChat */ RocketChat.authz.roomAccessValidators = [ function(room, user) { - return room.usernames.indexOf(user.username) !== -1; + const subscription = RocketChat.cache.Subscriptions.findOneByRidAndUserId(room._id, user._id); + if (subscription) { + return subscription._room; + } }, function(room, user) { if (room.t === 'c') {