Introduce a boolean flag named allow_any per room to control whether: Anyone with the room code can instantly join Or must request permission from existing members before entering