bug report

in a needs phone verify server, a member didn't verify they phone but if add a role to let him can read/send message role, then he can send a message with no verify phone