Users that don't have permissions to see the BBB activity (being student and ativity is hidden to students) or not being able to join to BBB session (and so they don't have 'mod/bigbluebuttonbn:join' over the course context), are receiving the notifications fired by function bigbluebuttonbn_broker_recording_ready() [bbb_broker.php], when the recording is ready for viewing.

I believe that this should be avoided, since it is no make any sence that users, even being subscribed at course but aren't enable to see any BBB activities, receive notifications of "recording is ready", that will never being able to view it, since they don't have access it. So for that reason could be considered as a "bug"?

It can easily be fixed,

Proposed solution:

  Simply by adding the capability 'mod/bigbluebuttonbn:join'  on the second param when calling for function get_enrolled_users(), at line 118 of notifier.php file:

     So line with:
        $users = (array) get_enrolled_users($context, '', 0, 'u.*', null, 0, 0, true);
    becomes to be:
        $users = (array) get_enrolled_users($context, 'mod/bigbluebuttonbn:join', 0, 'u.*', null, 0, 0, true);