Transfer changes from enterprise codebase

server/policies/collection.ts

@@ -92,7 +92,7 @@ allow(User, "share", Collection, (user, collection) => {
   return true;
 });
 
-allow(User, "readDocument", Collection, (user, collection) => {
+allow(User, ["readDocument", "export"], Collection, (user, collection) => {
   if (!collection || user.teamId !== collection.teamId) {
     return false;
   }

server/routes/api/collections.ts

@@ -576,7 +576,7 @@ router.post(
     const collection = await Collection.scope({
       method: ["withMembership", user.id],
     }).findByPk(id);
-    authorize(user, "read", collection);
+    authorize(user, "export", collection);
 
     const fileOperation = await sequelize.transaction(async (transaction) =>
       collectionExporter({