Export Application Permissions Vulnerability Issue

[ajith-k-v]

Current Behavior:

Currently, when exporting an application with Tooljet DB, users have the capability to export the application with different workspace id and Tooljet db id

Expected Behavior:

The export functionality should restrict users from exporting applications with different workspace id and Tooljet db id

Steps to Reproduce:

1. Create an application with Tooljet db query.

2. Export the Application:

3. Copy the generated cURL ( request body: { "app": [{"id": "0980a34f-828e-49d3-bde8-bf10752b3bef"}], "tooljet_database": [{"table_id": "fda348ef-13d7-4f19-86da-e1ffbc72800c"}], "organization_id": "31f59dba-f48b-4dd2-924b-3648ac7f0772" })

4. Create a new workspace and Tooljet db

5. Update the request body with new workspace id and tooljet db id.

6. Send the post request.