default rule for room access