remove paid members from IAM manageable list

Author: devksingh4

src/api/routes/iam.ts

@@ -597,7 +597,11 @@ No action is required from you at this time.
           entraIdToken,
           fastify.environmentConfig.EntraServicePrincipalId,
         )
-      ).filter((x) => !genericConfig.ProtectedEntraIDGroups.includes(x.id));
+      ).filter(
+        (x) =>
+          !genericConfig.ProtectedEntraIDGroups.includes(x.id) &&
+          x.id !== fastify.environmentConfig.PaidMemberGroupId,
+      );
       request.log.debug(
         "Got manageable groups from Entra ID, setting to cache.",
       );

tests/live/iam.test.ts

@@ -7,7 +7,7 @@ import {
 } from "../../src/common/types/iam.js";
 import { allAppRoles, AppRoles } from "../../src/common/roles.js";
 import { getBaseEndpoint } from "./utils.js";
-import { genericConfig } from "../../src/common/config.js";
+import { environmentConfig, genericConfig } from "../../src/common/config.js";
 
 const baseEndpoint = getBaseEndpoint();
 test("getting groups", async () => {
@@ -28,6 +28,9 @@ test("getting groups", async () => {
     expect(item["displayName"].length).greaterThan(0);
     expect(item["id"].length).greaterThan(0);
     expect(genericConfig.ProtectedEntraIDGroups).not.toContain(item["id"]);
+    expect(genericConfig.ProtectedEntraIDGroups).not.toStrictEqual(
+      environmentConfig["dev"].PaidMemberGroupId,
+    );
   }
 });