Add filter to allow/deny @all

packages/rocketchat-authorization/server/startup.coffee

@@ -32,6 +32,7 @@ Meteor.startup ->
 		{ _id: 'manage-integrations', roles : ['admin'] }
 		{ _id: 'manage-own-integrations', roles : ['bot'] }
 		{ _id: 'manage-oauth-apps', roles : ['admin'] }
+		{ _id: 'mention-all', roles : ['admin', 'moderator', 'owner', 'user'] }
 		{ _id: 'mute-user', roles : ['admin', 'moderator', 'owner'] }
 		{ _id: 'remove-user', roles : ['admin', 'moderator', 'owner'] }
 		{ _id: 'run-import', roles : ['admin'] }

packages/rocketchat-lib/package.js

@@ -103,6 +103,7 @@ Package.onUse(function(api) {
 	api.addFiles('server/methods/setEmail.js', 'server');
 	api.addFiles('server/methods/restartServer.coffee', 'server');
 	api.addFiles('server/methods/filterBadWords.js', ['server']);
+	api.addFiles('server/methods/filterATAllTag.js', 'server');
 
 	// SERVER STARTUP
 	api.addFiles('server/startup/settingsOnLoadCdnPrefix.coffee', 'server');

packages/rocketchat-lib/server/methods/filterATAllTag.js

@@ -0,0 +1,38 @@
+RocketChat.callbacks.add('beforeSaveMessage', function(message) {
+
+	// Test if the message mentions include @all.
+	if (message.mentions != null &&
+		_.pluck(message.mentions, '_id').some((item) => item === 'all')) {
+
+		// Check if the user has permissions to use @all.
+		if (!RocketChat.authz.hasPermission(Meteor.userId(), 'mention-all')) {
+
+			// Get the language of the user for the error notification.
+			let language = Meteor.user().language;
+			let action = TAPi18n.__('Notify_all_in_this_room', {}, language);
+
+			// Add a notification to the chat, informing the user that this
+			// action is not allowed.
+			RocketChat.Notifications.notifyUser(Meteor.userId(), 'message', {
+				_id: Random.id(),
+				rid: message.rid,
+				ts: new Date,
+				msg: TAPi18n.__('error-action-not-allowed', { action }, language)
+			});
+
+			// Also throw to stop propagation of 'sendMessage'.
+			throw new Meteor.Error(
+				'error-action-not-allowed',
+				'Notify all in this room not allowed',
+				{
+					method: 'filterATAllTag',
+					action: 'Notify_all_in_this_room'
+				}
+			);
+		}
+	}
+
+	return message;
+
+}, 1);
+