Don't show public spaces for readonly role (#9182)

Signed-off-by: Anton Alexeyev <[email protected]>

Author: utkaka

server/middleware/src/spaceSecurity.ts

@@ -466,7 +466,8 @@ export class SpaceSecurityMiddleware extends BaseMiddleware implements Middlewar
       ...this.systemSpaces,
       ...this.mainSpaces
     ]
-    const unfilteredRes = isData ? res : [...res, ...this.publicSpaces]
+    const ignorePublicSpaces = isData || account.role === AccountRole.ReadOnlyGuest
+    const unfilteredRes = ignorePublicSpaces ? res : [...res, ...this.publicSpaces]
     if (showArchived) {
       return unfilteredRes
     }