You might see that the Dropbox Community team have been busy working on some major updates to the Community itself! So, here is some info on what’s changed, what’s staying the same and what you can expect from the Dropbox Community overall.
Forum Discussion
List files in app folder of user
Hi,
Please help as I am sort of stuck...
I am developing a dropbox app to load files in to our system that have been dropped into an application folder by some user.
So when configuring this th...
Any access token gives access to particular user content to be processed with particular access rights. It doesn't matter what type of client you have used (web or other).
Available content is restricted to selected application access (to entire account or to application folder only). Access rights are restricted to the selected scopes, if any. That's it.
Classical access token, used in API calls, doesn't need any additional application authentication despite of Dropbox always knows what application the particular token has been issued to. It denotes an user always. If you mean refresh token, then on refresh the application needs to authenticate again. If you are using SDK, normally you shouldn't care for that. Your SDK will take care.
CySDeveloper wrote:...
Or, and this might be an answer to my question, do i get a special access-token returned that is specifically for the application id/user combination?
To be honest, I'm not sure what exactly you mean here. Does the above cover your question?
Hi CySDeveloper,
To identify particular account you have to keep account associated access/refresh token in advance and use the access token. That's it.
Take a look on following example: https://github.com/dropbox/mdwebhook/blob/1b32d5aec51019eb698905345a21af46e0d4be8e/app.py#L66
Hope this gives direction.
Hi thank you for your response,
I understand the option that you have given, but it is not what i want.
If i keep the accesstoken/refreshtoken then i will have full access like the user, whereas I have asked them to accept my application with a specific set of minimized rights. So now I want to access the application folder as the application and not as that user.
Do you have any ideas?
Tnx
CySDeveloper wrote:...
If i keep the accesstoken/refreshtoken then i will have full access like the user, whereas I have asked them to accept my application with a specific set of minimized rights....
Not exactly. It depends on what kind of rights were given to the particular application. If the rights are to the application folder only, that folder is the root you can see and nothing else. You can't do anything outside the application folder. What kind of application you have created? Is it restricted to application folder or not?! Also what kind of scopes were associated to the application? (they are describing what the application can do)
CySDeveloper wrote:... So now I want to access the application folder as the application and not as that user.
...
As far as I know Dropbox doesn't provide such possibility.
It is a scopedapp/appfolder (which is all I need).
scopes are file.metadata.read, file.metadata.write, files.content.read, files.content.write
If this is not possible then the whole application approach in dropbox does not make sense, as i always connect with full user rights.
So i believe there must be a way...
CySDeveloper wrote:It is a scopedapp/appfolder (which is all I need).
..., as i always connect with full user rights.
...
🤔 The above are mutually exclusive. You are restricted to a single folder, something not applied to the corresponding user (with full rights).
CySDeveloper wrote:...
So i believe there must be a way...
I believe this this will be available some day, but not right now... unfortunately.
About Dropbox API Support & Feedback
Find help with the Dropbox API from other developers.
