"Users must use Two Factor Authentication" setting does not work

Description:

As in the title, "Users must use Two Factor Authentication" setting does not work.

Steps to reproduce:

1. Enabled "Users must use Two Factor Authentication" setting on the "user" role.
2. Created new user with "user" role.
3. Able to log in with the new user and do everything without setting up 2FA.
4. Nothing is enforced.

Expected behavior:

1. Server disallows any action till 2FA is set up.
2. When user logs in or refreshes the page, some 2FA related setup flow pops up.

Actual behavior:

Nothing, user can do everything without ever setting up 2FA,

Server Setup Information:

• Version of Rocket.Chat Server: 5.4.0
• Operating System: ubuntu 22.04
• Deployment Method: manual
• Number of Running Instances: 1
• DB Replicaset Oplog: enabled
• NodeJS Version: 14.21.2
• MongoDB Version: 6.0.3

Client Setup Information

Not sure what this means, accessing from browser.

Relevant logs:

Few other issues mention error logs in browser or server, but no error logs seen in this case.

Start by reproducing the issue with the "Users must use Two Factor Authentication" setting enabled for the user role, then trace the existing 2FA enforcement flow. Done means a newly created user cannot perform normal actions or proceed without completing 2FA setup, and the behavior is covered by a regression test.