To support restricted data export, we need to add a configuration option in Optimize. With this, CSV export can be restricted to one of all/superusers/none. As part of the identity request response, the authorization for `csv_export` will determine whether or not the following options are available in the UI:

• Report CSV export
• Branch analysis process instance ID CSV export

ATs:

• Json import/export is unaffected
• Authorization respects the configured export type (unauthorized users cannot download CSVs)