Please follow what was implemented in MIX:

• configuration option for publicly visible (doscoverable) rooms with default DOMAIN_ADMIN ACL
• configuration option for hidden/private rooms with default DOMAIN

(see https://projects.tigase.net/issue/mix-14#focus=Comments-4-27494.0-0 )

Changed the defaults to match the MIX, otherwise works ok.

The feature is configurable via two options: hidden-room-creation-acl and public-room-creation-acl and follow ACL options defined for Tigase Server (https://docs.tigase.net/projects/tigase-tigase-mix/en/latest/Configuration.html#setting-acl)

muc () {
    mucConfig () {
        'hidden-room-creation-acl' = DOMAIN
        'public-room-creation-acl' = DOMAIN_ADMIN
    }
}