You might see that the Dropbox Community team have been busy working on some major updates to the Community itself! So, here is some info on what’s changed, what’s staying the same and what you can expect from the Dropbox Community overall.
Forum Discussion
Permissions for Sub-Folders
Hi People, Drop box Business user. We have 3 folders at the highest level.. Folder 1 Folder 2 Team folder We have different permissions for access to Folder 1 & Folder 2 depending o...
Sanchez
Dropbox Staff
Dropbox Staff
I know this post is several months old, but the problem with this solution is the ability to deny access to a subfolder to a segment of the parent group.
This particular section outlines the issue that won't allow the OP to do what he wants to:
Can I restrict access to a folder inside a team folder?
Access to folders inside team folders can be granted to new people. However, access can't be taken away from people who are members of higher-level folders. If you have access to a folder, you have access to all folders inside it. If you don't want certain people to access a folder inside a team folder, you can:
- Move the folder to a higher level of the team folder
- Create a new shared folder and only grant the relevant people access
With this restriction, the ability to create a "Financials" subfolder with restricted permission to managment is not possible. Dropbox's recommendation to move a folder to higher level of the team folder doesn't work quite well either (if the entire team still has access to the "TEAM" folder). And creating another shared folder increases the "mess and confusion" (referred to here) at the root folder level of participants and becomes unmanageable from a folder management perspective when there are people who may have access to multiple teams (or even the ton of distinctly shared folders from other dropbox users.
If Dropbox can allow explicit deny, either by group or individuals in subfolders, that should help with the specific need and allow businesses to continue to manage a single folder hierarchy within the company or team. I don't know if that would cause other issues, but I think the concept of explicit deny's should work with Dropbox's permission tagging model.
- Sanchez
I really apprciate the detail provided here in this complementary follow-up to the OP's issue.
I am writing because I have the exact same issue/dynamic within my organization, where I just upgraded to a DB business account on trial and I am now kind of in this pickle. I work the same way with partioning rights to the financials sub-folders of each client account folder that the team is on, and I am glad to know I am not the only one. I can't imagine there aren't a TON of small businesses with a similar use-case.
It's unfortunate, becasue I chose to upgrade to Business Account because I thought 'Granular Permissions' meant I could literally choose the sharing settings individually for every single folder within the whole folder structure. This seems so logical, to be able to 'hide' certain folders, even within a team folder, so that only the account owner or Admin can see them.
I hope this or something like this makes it's way into Dropbox Business, or I am going to be sorely having to downgrade back to my personal Pro account or spend way too many hours I don't have creating a bunch of 'Teams' and trying to figure out folder logistics in my head.... :/
- Sanchez
I have to agree with everything that was said in this post. I too just now bought the business subscription for the granular permissions, and discovered that these are waterfall permissions. I dont know why this is such a problem, given it is standard in any linux, unix system with a chmod. Also this is standard in github.
This is certianly the standard on many other systems and it baffles me Dropbox hasn't taken the time to understand the gravity of this requirement for it's business customers. We'll likely have to move away from Dropbox due to this very specific limitation.
