# Export API security

**URL:** <https://forum.radzen.com/t/export-api-security/11275>\
**Category:** Blazor Server\
**Created:** [July 12, 2022, 10:29am UTC](https://forum.radzen.com/t/export-api-security/11275 "2022-07-12T10:29:05Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![zarroc](https://forum.radzen.com/user_avatar/forum.radzen.com/zarroc/32/10052_2.png) [@zarroc](https://forum.radzen.com/u/zarroc)\
**Post date:** [July 12, 2022, 10:29am UTC](https://forum.radzen.com/t/export-api-security/11275/1 "2022-07-12T10:29:05Z")

</div>

Hello,

When a datasource is imported a new controller to export excel and csv is generated (if the option is selected).

This controller is not securized by default. Is there a way to securice it using the radzen IDE?

On the other way, this is very very dangerous.

Thanks

---

<div class="post-metadata">

**Author:** ![korchev](https://forum.radzen.com/user_avatar/forum.radzen.com/korchev/32/4_2.png) [@korchev](https://forum.radzen.com/u/korchev)\
**Post date:** [July 12, 2022, 10:51am UTC](https://forum.radzen.com/t/export-api-security/11275/2 "2022-07-12T10:51:47Z")

</div>

Hi @zarroc,

You can secure the export controller by adding a partial class for it and decorating it with the `[Authorize]` attribute.

Regards,  
Atanas Korchev,  
the Radzen team

---

<div class="post-metadata">

**Author:** ![zarroc](https://forum.radzen.com/user_avatar/forum.radzen.com/zarroc/32/10052_2.png) [@zarroc](https://forum.radzen.com/u/zarroc)\
**Post date:** [July 12, 2022, 11:44am UTC](https://forum.radzen.com/t/export-api-security/11275/3 "2022-07-12T11:44:41Z")

</div>

Yes, thank you, i have done it before. But I suggest to add an advice while importing the datasource to notice that it will generate an opened API.

I discovered it because I added swagger to the project.

Kind regards

---

<div class="post-metadata">

**Author:** ![zarroc](https://forum.radzen.com/user_avatar/forum.radzen.com/zarroc/32/10052_2.png) [@zarroc](https://forum.radzen.com/u/zarroc)\
**Post date:** [July 12, 2022, 11:52am UTC](https://forum.radzen.com/t/export-api-security/11275/4 "2022-07-12T11:52:40Z")

</div>

Or even securize it by default, or applying the same filter than applied in the main view CRUD class