From c7104a302f8c277da55ca0f6d8fb60c646d0c1a1 Mon Sep 17 00:00:00 2001
From: Paul Kraft <pauljohanneskraft@users.noreply.github.com>
Date: Tue, 28 Apr 2026 22:07:48 +0200
Subject: [PATCH] use priviledged service account for exportData

---
 functions/src/functions/exportData.ts | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/functions/src/functions/exportData.ts b/functions/src/functions/exportData.ts
index 7157030c..c710de52 100644
--- a/functions/src/functions/exportData.ts
+++ b/functions/src/functions/exportData.ts
@@ -7,7 +7,7 @@
 //
 
 import { exportDataInputSchema } from "@stanfordbdhg/engagehf-models";
-import { validatedOnCall } from "./helpers.js";
+import { privilegedServiceAccount, validatedOnCall } from "./helpers.js";
 import { UserRole } from "../services/credential/credential.js";
 import { getServiceFactory } from "../services/factory/getServiceFactory.js";
 
@@ -60,4 +60,7 @@ export const exportData = validatedOnCall(
       content: buffer.toString("base64"),
     };
   },
+  {
+    serviceAccount: privilegedServiceAccount,
+  },
 );