CSV export works, needs to check userrole