fix!: Only room creator can set the E2EE room key for the first time

[KevLehman]

Proposed changes (including videos or screenshots)

• Checks that room.u._id is the same as the user requesting. Currently anyone invited to the room can set the roomKeyID (and the E2EE key) before the owner gets the key, which can cause race conditions and leave the room in a bad state.

Issue(s)

https://rocketchat.atlassian.net/browse/E2EE2-79

Steps to test or reproduce

Further comments

[changeset-bot]

🦋 Changeset detected

Latest commit: b619923

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 35 packages

Name	Type
@rocket.chat/meteor	Major
@rocket.chat/core-typings	Major
@rocket.chat/rest-typings	Major
@rocket.chat/uikit-playground	Patch
@rocket.chat/api-client	Patch
@rocket.chat/apps	Patch
@rocket.chat/core-services	Patch
@rocket.chat/cron	Patch
@rocket.chat/ddp-client	Patch
@rocket.chat/freeswitch	Patch
@rocket.chat/fuselage-ui-kit	Major
@rocket.chat/gazzodown	Major
@rocket.chat/livechat	Patch
@rocket.chat/model-typings	Patch
@rocket.chat/ui-contexts	Major
@rocket.chat/account-service	Patch
@rocket.chat/authorization-service	Patch
@rocket.chat/ddp-streamer	Patch
@rocket.chat/omnichannel-transcript	Patch
@rocket.chat/presence-service	Patch
@rocket.chat/queue-worker	Patch
@rocket.chat/stream-hub-service	Patch
@rocket.chat/license	Patch
@rocket.chat/omnichannel-services	Patch
@rocket.chat/pdf-worker	Patch
@rocket.chat/presence	Patch
rocketchat-services	Patch
@rocket.chat/network-broker	Patch
@rocket.chat/models	Patch
@rocket.chat/ui-avatar	Major
@rocket.chat/ui-client	Major
@rocket.chat/ui-video-conf	Major
@rocket.chat/ui-voip	Major
@rocket.chat/web-ui-registration	Major
@rocket.chat/instance-status	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[dionisio-bot]

Looks like this PR is ready to merge! 🎉
If you have any trouble, please check the PR guidelines

[github-actions]

PR Preview Action v1.4.8
🚀 Deployed preview to https://RocketChat.github.io/Rocket.Chat/pr-preview/pr-33520/
on branch gh-pages at 2024-10-11 21:30 UTC

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Please upload report for BASE (release-7.0.0@7ce9407). Learn more about missing BASE report.

Additional details and impacted files

@@               Coverage Diff                @@
##             release-7.0.0   #33520   +/-   ##
================================================
  Coverage                 ?   75.70%           
================================================
  Files                    ?      432           
  Lines                    ?    19919           
  Branches                 ?     5084           
================================================
  Hits                     ?    15079           
  Misses                   ?     4269           
  Partials                 ?      571           

Flag	Coverage Δ
unit	75.70% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

[MarcosSpessatto]

We should change this to a fix instead

The merge-base changed after approval.