Download Content Permissions Misleading

In the permissions for the content library, there is a permission for "Download Content".

Although the description expressly mentions Q&A pairs, users are still able to export questions and metadata from the content library with the permission removed.

AllianceBernstein is asking that when this permission is turned off that the role can no longer export questions from the content library.

Find more posts tagged with

Fixed/Implemented

Status: Fixed/Implemented

Comments

VISWA S

@Pablo Ojeda The permission is to export the response/description/Merge tag values from the content library, respective of the content turned on or off.

As of now there is no option to turn off the export content which export the question and metadata.

The user without Download content permission can only export questions and metadata.

Can we understand the use case behind not export questions and metadata?

@sathish s FYI

Pablo Ojeda

@VISWA S they just have tighter restrictions and do not want team members to have the ability to download or export any of this information.

VISWA S

@Pablo Ojeda As of now, we cannot do that, the export questions is an option available all the time in the Content library we cannot turn off it.

If we want to turn of it, we need to build a feature for it, with a switch, we will keep you posted on it.

Pablo Ojeda

@VISWA S AllianceBernstein says this is critical for them and security. Would this be considered? Also, if this cannot be done they would be ok removing the option here for certain users.

Pablo Ojeda

@VISWA S AllianceBernstein wants to escalate this as they believe it is a security risk. Please let me know if there is anything we can do.

VISWA S

@sathish s FYI

sathish s

Looping in @Natalie_Berigan and @karthikumar on this. It seems the customer "Alliance Bernstein" is escalating on this S4. Let me know your thoughts. FYI @Pablo Ojeda

Pablo Ojeda

@Natalie_Berigan and @karthikumar I have a meeting with Alliance and they would like to know if there are any updates. Is there anything I can share?

Karthik Kumar

@Pablo Ojeda -
In the current system, only when the Download content permission is enabled, they can export the responses. When it is not enabled, they can only export the questions and metadata.

Just trying to understand their use case - Usually, all of the critical data is included when they export the responses. But, how can exporting questions alone pose security risks?

We can consider it as part of Q2,
What would be implemented - By default it will not show any export options. We will bring a permission for Export questions.
cc @Natalie_Berigan

manjula

@Pablo Ojeda this is implemented in June 2025