Is there a good way to disable the Export users feature for Moderators? And not just display:none on the UI? I’m OK trusting people to see individual emails if need be, but no one on the Moderators team needs one click access to a list of emails for every forum user. Logs aren’t enough here because as soon as they have that list the damage may already be done.
One workaround I’ve found may be to just edit the system_messages.csv_export_succeeded email template so exclude the CSV download link. That with some CSS to hide the buttons may be enough.
Turns out it’s not such a great workaround as it also disables the ‘Download all’ feature for regular users.