discourse/app/controllers/export_csv_controller.rb

class ExportCsvController < ApplicationController

  skip_before_filter :check_xhr, only: [:show]

  def export_entity
    params.require(:entity)
    params.require(:entity_type)
    if params[:entity_type] == "admin"
      guardian.ensure_can_export_admin_entity!(current_user)
    end

    Jobs.enqueue(:export_csv_file, entity: params[:entity], user_id: current_user.id)
    render json: success_json
  end

  # download
  def show
    params.require(:id)
    filename = params.fetch(:id)
    export_id = filename.split('_')[1].split('.')[0]
    export_initiated_by_user_id = 0
    export_initiated_by_user_id = CsvExportLog.where(id: export_id)[0].user_id unless CsvExportLog.where(id: export_id).empty?
    export_csv_path = CsvExportLog.get_download_path(filename)

    if export_csv_path && export_initiated_by_user_id == current_user.id
      send_file export_csv_path
    else
      render nothing: true, status: 404
    end
  end

end