Discussion on answer by Ja1024: Is SQL Injection possible if we're using only the IN keyword (no equals = operator) and we handle the single quote

Explicit write access

Even when this room is read-only or their reputation is too low, these users will be able to talk in this room. Users with insufficient reputation to chat have been granted write access to this room by a chat moderator.