I want to intervene in the export feature in the entries form, so that every time I export, I will check the permission, if necessary, I will block the export permission. I need to focus on how to block the export permission.
I don’t think that Umbraco Forms has any extension points that you can use for this functionality.
I suppose that one could create a middleware that intercepts requests to umbraco/backoffice/UmbracoForms/Export/PostGenerateExport and/or /umbraco/backoffice/UmbracoForms/Export/GetExport and do the permission check there.
However, so long as a user has the View Entries permission, there’s no meaningful extra security to be gained from doing this - all of the data that could be downloaded is still accessible through the backoffice and could easily be scraped.
The only sure fire way of stopping someone exfiltrating Umbraco Forms data via the backoffice is to not let them have access to that data at all.
1 Like