Enhancement: Exclude hidden fields from CSVs exported by public users

[eferch]

Current behaviour

• As an administrator: In the visible elements module, uncheck one or more archival description fields to make them hidden from the public.
• As a public user:
  • Add one or more archival descriptions to the clipboard.
  • Go to the clipboard and export a CSV.
  • The exported CSV includes the field(s) that have been unchecked in the Visible elements module.

Expected behaviour

Exported CSVs should only contain fields that are visible to the user who exported the CSV.

Possible solution

Ideally, exclude hidden fields from the CSV export if the user is not logged in. Another option that would work for us would be to hide the export button entirely for public users.

Context

Hidden fields may contain sensitive information that should not be shared freely with the public (e.g. immediate source of acquisition where the donor prefers to be anonymous). Having this information included in publicly available CSV exports then becomes an information privacy/security risk.

Note that we would still want the full export functionality to be available to staff (authenticated users), just not to the public.