---
title: "Verify export permissions remove restricted columns"
description: "Check a sandbox viewer export against an administrator baseline, ensuring restricted fields are absent from headers and file content as well as the UI."
canonical_url: "https://vostride.com/agent-library/reporting-exports/permission-redacted-columns.md"
md_url: "https://vostride.com/agent-library/reporting-exports/permission-redacted-columns.md"
content_kind: "recipe"
topic: "reporting-exports"
---

# Verify export permissions remove restricted columns

Check a sandbox viewer export against an administrator baseline, ensuring restricted fields are absent from headers and file content as well as the UI.

## Risk

Hiding a table column does not ensure the export endpoint enforces the same permission. Use distinctive synthetic sentinel values in restricted fields and inspect the entire parsed artifact without exposing real sensitive information.

## Fixtures

- An owned sandbox report with a restricted internal-note field containing a unique synthetic sentinel.
- A disposable viewer without access to that field, an administrator baseline manifest, and independently verified role grants.
- An approved artifact parser and raw-content scan oracle scoped to this sandbox export; test credentials remain outside recipe text and artifacts.

## Steps

1. Open the report as the restricted viewer and verify its table and column selector do not expose the internal-note field.
2. Request an export using the viewer workflow and verify the completed job belongs to that viewer account and allowed report scope.
3. Parse the artifact and verify the restricted column header and sentinel value are absent while the permitted fields remain complete.
4. Inspect the independent permission and artifact oracles and verify no role grant changed and no hidden metadata or extra sheet includes the restricted content.

## Expected results

- Exported columns follow the viewer permission boundary.
- The synthetic restricted sentinel appears nowhere in the delivered artifact.
- Allowed record identifiers and public fields remain accurate and complete.

## False-pass traps

- An absent visible column can coexist with a hidden spreadsheet sheet or raw CSV field containing the data.
- Exporting as an administrator bypasses the permission boundary being tested.

## Cleanup

- Delete the viewer export and remove the synthetic restricted sentinel fixture.

## Use with agent-qa

Adapt this test design to your application's acceptance criteria and configured target using the [recipe execution guide](/agent-library/software-factory/turn-a-recipe-into-an-agent-qa-test.md). External fixture setup and non-UI checks require your own supported hooks or test tooling. Validate the authored test, execute it, and inspect the completed evidence; this recipe is not a recorded test result.

## References

- [agent-qa first test](/docs/agent-qa/guides/first-test.md)
- [agent-qa hooks](/docs/agent-qa/guides/hooks.md)
- [agent-qa test](/docs/agent-qa/configuration/test.md)

- [Reporting and export QA recipes](/agent-library/reporting-exports.md)
- [Software factory QA library](/agent-library.md)