Support

Search results for ""

Sorry, no results found. Perhaps you would like to search the community forum?
All Topics
cbracken

Hide export button (by role)

Is there a hook or another method to hide the export button? Preferably by role. I know I can hide in CSS, but that’s not very rigorous (and you’ve previously changed the CSS class in an update, causing the button to reappear).

3 months, 1 week ago
Stefan
Developer

We don’t have a hook to alter that behavior.
But in fact, the button is also hidden with CSS by us.
We do this based on the body class ‘ac-hide-export-button’.
So you could add this class to the body for specific rules and we do the rest.
Would that be a good solution for you?

3 months, 1 week ago
cbracken

No, it’s a terrible solution. It’s a massive security loophole.

Anyone can unhide the export button, simply by using “Inspect Element” in any common browser.

For example, if your plugin is used on an ecommerce site, an employee can use this to export all data for all customers. This is enough data to start up and market a rival business; or it could simply be sold to a competitor.

3 months, 1 week ago
Tobias
Developer

The user can only export data that is already accessible to that user. They can already export the information themselves by copy-pasting that information from the list table to a spreadsheet. Our export feature does not facilitate any additional data access. So, I would not call this a security breach.

Our export would make that process a little faster, and thus save the user some time, but if someone has the intention in ‘stealing’ data they would not mind a few extra minutes creating their own sheet.

That said, I think we could add some more fine-grained capabilities which would allow you to have more control over what a user can do with Admin Columns. We’ll discuss this in more detail with the team.

Cheers,

Tobias

3 months, 1 week ago
mailcontact

I would also like to state that a role based option to remove the export function is a must. I have just updated the plugin to the latest from an older version and was shocked to see that this feature/button appeared no matter what the role is.

“Our export would make that process a little faster, and thus save the user some time…”

This is an underestimation of the issue. With a click of a button hundreds/thousands of orders and personal data can be exported. Is it realistic that someone copy-pastes all this by hand? The time difference between the two processes is not “a few extra minutes” but in most cases probably days or weeks.

We’ll discuss this in more detail with the team.

Thank you in advance. We hope you will implement it ASAP, in the meantime I hid it by CSS

2 months, 1 week ago

You must be logged in to reply to this topic.