Export formats and injection safety reference
This reference distinguishes formats listed in the export interface from downloads verified in the current service, and explains the permission rules that protect member details.
Formats by source
Section titled “Formats by source”| Source | Listed formats | Current delivery |
|---|---|---|
| Rendered report | CSV | Immediate download for up to 1,000 rows; a larger report is refused with a size message |
| Members list | CSV, Excel, XML | The current worker produces CSV files even when Excel or XML is selected. Use CSV until the other renderers are corrected. |
| Payments list | CSV, Excel | The current job can report completion without a usable download. Do not rely on this path for a file until delivery is corrected. |
Excel and PDF remain in the report request vocabulary, but a rendered report currently serves CSV only. PDF is not offered on any export surface. The Members and Payments list choices are separate from the report format set; their delivery defects are being tracked with the backend owner.
Formula-injection protection
Section titled “Formula-injection protection”CSV cells beginning with =, +, -, or @ are escaped by the working Members and rendered-report CSV paths so a spreadsheet does not interpret them as formulas. The current report export response has no escaped-cell count to show in a notice. Excel list delivery and typed-cell behavior are pending correction.
Column selection and member details
Section titled “Column selection and member details”On a rendered report, the export dialog lets an authorized admin choose columns. The report export requires at least one exportable column. Current rendered reports use aggregate columns. If a report offers member-detail columns, only an admin with reports:export-pii can include them; otherwise they are omitted, and the dialog explains why. List exports use their own permissions and do not offer the report-specific Include member details checkbox.
| Role | Export access |
|---|---|
| Admin with the source’s export permission | May request the source’s listed formats; use only verified downloads described above |
Admin without reports:export-pii on a rendered report |
Export may proceed without member-detail columns |
| Board Member / Governance Reader | No reports:export grant; no export action in the Board portal |
A board member may read on-screen aggregates or receive a separately available aggregate report shared by an authorized admin. The Board views themselves have no current export route; receiving a separate report does not grant export permission.