Okay, thanks Mark and Chayce. Yes, it's a precarious situation because there is a legitimate advantage for them being able to download some of the records to work in Excel. I don't want to take away the option completely and users still need the ability to see all records also.
Too bad QuickBase doesn't have a built-in limiter on the number of records a user can download or some safeguards against that "one" malicious actor.
You could always create your own application/data permission model. This would give you customized control around which users can see which records. It doesn't come out of the box with Quickbase, but it's certainly possible. Technically you could make a model to limit how many records a user can see by providing access to only an arbitrary or "safe" amount.
