Add filter to allow/deny @all

[thomasspiesser]

@RocketChat/core

With this PR, an administrator has the option the deny the use of the @all tag.

Administrators, room moderators and owners are not affected and can still use the @all tag.

When a regular user tries to use it and it is has been denied by the admin, the message is not send and the user is informed about it.

Info: "Alle Benutzer in diesem Raum benachrichtigen ist nicht erlaubt" is the german t9n for "Notify all in this room is not allowed".

[rodrigok]

Awesome, can you add a description for this setting to warn that admins, moderators and owners can still use?

[thomasspiesser]

Sure! Where would you like to show this warning?

[danielwegener]

I'd rather like this feature as a mention-all permission.

[rodrigok]

@danielwegener yes, that makes more sense. @thomasspiesser what do you think?

[thomasspiesser]

All for it! What would I need to change for that?

[rodrigok]

@thomasspiesser you should use RocketChat.authz.hasPermission(Meteor.userId(), 'mention-all') instead of the setting check and add that permission here https://github.com/RocketChat/Rocket.Chat/blob/develop/packages/rocketchat-authorization/server/startup.coffee

[thomasspiesser]

@rodrigok thanks, let me know if i got it right.

[rodrigok]

@thomasspiesser awesome, did you test? I think you should add user by default to the list of roles of that permission.

[thomasspiesser]

@rodrigok OK, I added user to the permission default. I did test it and it seems to work like a charm.

[rodrigok]

Awesome, thanks