// Get array of user privileges of all users in project
$rights = REDCap::getUserRights();

// For all users whose rights have expired, place their username into an array
$expired_users = array();
foreach ($rights as $this_username=>$these_rights) {
    // If user's expiration occurs before TODAY, then add to array
    if ($these_rights['expiration'] != "" && $these_rights['expiration'] < TODAY) {
        // Add to array
        $expired_users[] = $this_username;
    }
}

// Display expired users
var_dump($expired_users);

// Manually set username of single user in project
$this_user = 'jon_williams';

// Get array of user privileges for a single user in project (will have username as array key)
$rights = REDCap::getUserRights($this_user);

// If $rights returns NULL, then user does not have access to this project
if (empty($rights)) exit("User $this_user does NOT have access to this project.");

// Check if user can create new records
if ($rights[$this_user]['record_create']) {
    print "User $this_user CAN create records.\n";
} else {
    print "User $this_user CANNOT create records.\n";
}

// Check if the user is in a data access group (DAG)
$group_id = $rights[$this_user]['group_id'];
// If $group_id is blank, then user is not in a DAG
if ($group_id == '') {
    print "User $this_user is NOT assigned to a data access group.";
} else {
    // User is in a DAG, so get the DAG's name to display
    print "User $this_user is assigned to the DAG named \"" . REDCap::getGroupNames(false, $group_id)
        . "\", whose unique group name is \"" . REDCap::getGroupNames(true, $group_id) . "\".";
}