In ERPNext, I’ve noticed that when a user has Export permission for a DocType, they are able to export all fields, including those that are restricted by higher permission levels (permlevel).
Ideally, fields with higher permlevels should not be accessible or included in export for users who do not have access to those levels.
Is this the expected behavior in ERPNext, or is it a limitation/bug in the export functionality?
What is the recommended way to ensure that restricted fields are not included in exports?