Anonymous Write: Fix permissions

packages/rocketchat-authorization/server/startup.js

@@ -47,10 +47,10 @@ Meteor.startup(function() {
 		{ _id: 'set-owner',                     roles : ['admin', 'owner'] },
 		{ _id: 'unarchive-room',                roles : ['admin'] },
 		{ _id: 'view-c-room',                   roles : ['admin', 'user', 'bot', 'anonymous'] },
-		{ _id: 'view-d-room',                   roles : ['admin', 'user', 'bot', 'anonymous'] },
+		{ _id: 'view-d-room',                   roles : ['admin', 'user', 'bot'] },
 		{ _id: 'view-full-other-user-info',     roles : ['admin'] },
 		{ _id: 'view-history',                  roles : ['admin', 'user', 'anonymous'] },
-		{ _id: 'view-joined-room',              roles : ['guest', 'bot'] },
+		{ _id: 'view-joined-room',              roles : ['guest', 'bot', 'anonymous'] },
 		{ _id: 'view-join-code',                roles : ['admin'] },
 		{ _id: 'view-logs',                     roles : ['admin'] },
 		{ _id: 'view-other-user-channels',      roles : ['admin'] },

server/startup/migrations/v093.js

@@ -8,5 +8,25 @@ RocketChat.Migrations.add({
 				RocketChat.models.Settings.update({ _id: 'Accounts_AllowAnonymousRead' }, { $set: { value: setting.value } });
 			}
 		}
+
+		const query = {
+			_id: {
+				$in: [
+					'view-c-room',
+					'view-history',
+					'view-joined-room',
+					'view-p-room',
+					'preview-c-room'
+				]
+			}
+		};
+
+		const update = {
+			$addToSet: {
+				roles: 'anonymous'
+			}
+		};
+
+		RocketChat.models.Permissions.update(query, update, { multi: true });
 	}
 });