Protect group from license borrowing

classes/webservice.php

@@ -97,6 +97,12 @@ class webservice {
      */
     protected $instanceusers;
 
+    /**
+     * Zoom group to protect from licenses redefining
+     * @var array
+     */
+    protected $protectedgroups;
+
     /**
      * Maximum limit of paid users
      * @var int
@@ -151,6 +157,7 @@ public function __construct() {
             if (!empty($config->utmost)) {
                 $this->recyclelicenses = $config->utmost;
                 $this->instanceusers = !empty($config->instanceusers);
+                $this->protectedgroups = !empty($config->protectedgroups) ? explode(',', $config->protectedgroups) : [];
             }
 
             if ($this->recyclelicenses) {
@@ -461,12 +468,23 @@ private function get_least_recently_active_paid_user_id() {
         $userslist = $this->list_users();
 
         foreach ($userslist as $user) {
-            if ($user->type != ZOOM_USER_TYPE_BASIC && isset($user->last_login_time)) {
-                // Count the user if we're including all users or if the user is on this instance.
-                if (!$this->instanceusers || core_user::get_user_by_email($user->email)) {
-                    $usertimes[$user->id] = strtotime($user->last_login_time);
-                }
+            // Skip Basic user accounts.
+            if ($user->type == ZOOM_USER_TYPE_BASIC) {
+                continue;
+            }
+            // Skip the protected group.
+            if (!empty($this->protectedgroups) && array_intersect($this->protectedgroups, $user->group_ids ?? [])) {
+                continue;
+            }
+            // We need the login time.
+            if (!isset($user->last_login_time)) {
+                continue;
             }
+            // Count the user only if we're including all users or if the user is on this instance.
+            if (!$this->instanceusers || core_user::get_user_by_email($user->email)) {
+                continue;
+            }
+            $usertimes[$user->id] = strtotime($user->last_login_time);
         }
 
         if (!empty($usertimes)) {
@@ -476,6 +494,28 @@ private function get_least_recently_active_paid_user_id() {
         return false;
     }
 
+    /**
+     * Get a list of Zoom groups
+     *
+     * @return stdClass The call's result in JSON format.
+     */
+    public function get_groups() {
+        // Classic: group:read:admin.
+        // Granular: group:read:list_groups:admin.
+        // Not essential scope, execute only if scope has been granted.
+        if ($this->has_scope(['group:read:list_groups:admin']) || $this->has_scope(['group:read:admin'])) {
+            try {
+                $response = $this->make_call('/groups');
+            } catch (moodle_exception $error) {
+                $response = '';
+            }
+        } else {
+            $response = '';
+        }
+
+        return $response;
+    }
+
     /**
      * Gets a user's settings.
      *

lang/en/zoom.php

@@ -320,6 +320,8 @@
 $string['privacy:metadata:zoom_meeting_participants:user_email'] = 'The email of the participant';
 $string['privacy:metadata:zoom_meeting_view'] = 'The database table to track users that view the meeting recordings';
 $string['privacy:metadata:zoom_meeting_view:userid'] = 'The id of the user that viewed the recording';
+$string['protectedgroups'] = 'Protect groups';
+$string['protectedgroups_desc'] = 'Select Zoom groups to protect member users from license redefining';
 $string['recording'] = 'Recording';
 $string['recordingadd'] = 'Add Recording';
 $string['recordingdate'] = 'Recording Date';

settings.php

@@ -172,6 +172,25 @@
     );
     $settings->add($recycleonjoin);
 
+    // Only call to the web services and load the setting if the connection is OK.
+    if (isset($status) && $status === 'connectionok') {
+        $zoomgrps = [];
+        $groupobj = zoom_webservice()->get_groups();
+        if ($groupobj) {
+            foreach ($groupobj->groups as $group) {
+                $zoomgrps[$group->id] = $group->name;
+            }
+        }
+
+        $protectedgroups = new admin_setting_configmultiselect(
+            'zoom/protectedgroups',
+            get_string('protectedgroups', 'mod_zoom'),
+            get_string('protectedgroups_desc', 'mod_zoom'),
+            [],
+            $zoomgrps);
+        $settings->add($protectedgroups);
+    }
+
     // Global settings.
     $settings->add(new admin_setting_heading(
         'zoom/globalsettings',