Hello Ashish.
By default, ROLE_API (which I assume is being used) will have the security permissions to Export. If you want to restrict this functionality, you will need to create a custom role that clones ROLE_API and remove the permission. Then you will need to replace ROLE_API with the new custom role.
Hope this helps.
------------------------------
Bryant Barrenechea
Solution Architect | Professional Services
------------------------------