A shared folder where the non-owner changes content, causes cursor loop with wrong data

Dropbox Community Moderator

7 years ago

Thanks for the report! I just tried reproducing this using the steps you described though, and it's working properly for me.

Here's the code and output for each of the calls I tried, for reference:

# user A:
curl -X POST https://api.dropboxapi.com/2/files/list_folder/get_latest_cursor \
    --header "Authorization: Bearer <USER A ACCESS TOKEN>" \
    --header "Content-Type: application/json" \
    --data "{\"path\": \"\",\"recursive\": true}"

# {
#   "cursor": "AAFtK3SlwJQEVS58oxqGQTg-HhT_3BPO8S2U8rLrGk4ZJgTFNwHsg_o1cI0gOaaMgTRAoSOKG9Gaol6mo2kfTaoHoPM9Pt1mRJeasvplwOhU9hus15etRG7QT1EXE5Tq9J3xTXDubB21-dNSwbxIPNC2ETnBpHJU4wg29bJQi0DXUUCwz9soVnq9L30etEXf3G3o3T7B9_d1nOm7BeMg7SjRgMd3Okdr-xLWWtpsyIGB6OIeaLEScLp2hT9tpQRlTy5TVnvztKcpDLqw-QmkgnEDCxXpmBnQy3-2JbCrTOIc72j0HSuD8zSAVrqt7qr-M-FPFzsU2n5TOIhYfp3DOSeSlL66ZzjHUHCdmEVddzpFrFQgguBBgo5Mtt5as3M2hRgCLFJmO_3KZ9sVTumNJFLZY8_0BjaN6f7qTgUPkJRQAQ7PVVicci7S7RtPjwrmgMkCTN_t-CaSheFVKUBUKBpyzTGIm6zQFFudmODuF-HaJ4nKAlwcl3e4o-eG0C68w7d5TWGMY02cUB57rTRYTDb7Q8xUzZgf4fFLV7bJNk_lO2c6TwdVaUWLYeJuKno-3Qxugiy8n4--8QcletzCEwELn6ghyuPpEtQ9XXGBG86NghpkO-0R8tBrVonXhU9YDPElVm-dL1BE6B5N2U2yPJx2qaRiyBlAr5QESHU2qO2DxLAr5Ny6FLvlHyWMfrLPrB05CdIoNy3cZQLwrZjPD19RuJIouvqzAvLHVYSWL8-fqXRSmXtodd956K0G5s15XWaB-U4Tv7xB69w9CWicNI2Crb7Dc1qqyjZmYqo8fMsuNqk5LQ8fByxd2VTDR4zwzuGACVj51M9u74T96WGlP1xdoj007X4r4Gd3U0B0dOGDFaFwpnQz7NSH6iZKMcxYtCVAloYtSS_PA2OJIeI4bnwWxWAlQ8vtXRdCzGVYE6Dzv-MIUa-VoghJF1ihivrUsCXv1f4BFLabIJkZNWx7zoMLGzBYkOrMFBS_TPlO-fhSmGNisa0w4JAOOuk2l4rQn6JsQxry6EpPoy2aB2Z3NBr72zovnhTzPJ0qewmN51EOS5wGXKX-HWrOnDD8vhW8nTbQL2SjIA0xGe38xwX0RLkq8pBKvNIWRpv4BmwL13RAK2H6q0HHn1ahqdfYcaKA_7d6p3Lh5YUuTrd9s8pCt6-X8eR9tQ2Nmb1TeysnyD_c4vK5w-qWwk8z6-8WlCwUkC7zc7bRZGWcaqT17VqJR9fLQU883AO1IZXKND_WK2vAYBrgx6MoHyjfBqnMX_9QjVBfC9-73OvVf6e0BPFt86RkeYoahrBKBWxS_jQO3CU0Kfpzx0oQzjIEb2w5CO1Me_qWVmyerzJztN_ri64NaIB-bdWAui8fV7SlG27qBlPvfg"
# }

curl -X POST https://api.dropboxapi.com/2/files/create_folder_v2 \
    --header "Authorization: Bearer <USER A ACCESS TOKEN>" \
    --header "Content-Type: application/json" \
    --data "{\"path\": \"/test_377315\"}"

# {
#   "metadata": {
#     "name": "test_377315",
#     "path_lower": "/test_377315",
#     "path_display": "/test_377315",
#     "id": "id:25N5ksooX-sAAAAAAAODtw"
#   }
# }

curl -X POST https://api.dropboxapi.com/2/sharing/share_folder \
    --header "Authorization: Bearer <USER A ACCESS TOKEN>" \
    --header "Content-Type: application/json" \
    --data "{\"path\": \"/test_377315\"}"

# {
#   ".tag": "complete",
#   "access_type": {
#     ".tag": "owner"
#   },
#   "is_inside_team_folder": false,
#   "is_team_folder": false,
#   "owner_team": {
#     "id": "dbtid:AAALfOJvW_VA8-yeLzHQ5Pug2GR15Z4t8KI",
#     "name": "TEST API Tester Team"
#   },
#   "path_lower": "/test_377315",
#   "parent_folder_name": "",
#   "name": "test_377315",
#   "policy": {
#     "member_policy": {
#       ".tag": "anyone"
#     },
#     "resolved_member_policy": {
#       ".tag": "anyone"
#     },
#     "acl_update_policy": {
#       ".tag": "editors"
#     },
#     "shared_link_policy": {
#       ".tag": "anyone"
#     },
#     "viewer_info_policy": {
#       ".tag": "enabled"
#     }
#   },
#   "preview_url": "https://www.dropbox.com/scl/fo/6d8uprpum4hyb245mqxtp/AAA9RizsOUZYH6ijfW-5upJda?dl=0",
#   "shared_folder_id": "6607843792",
#   "time_invited": "2019-11-08T15:49:28Z",
#   "access_inheritance": {
#     ".tag": "inherit"
#   }
# }

curl -X POST https://api.dropboxapi.com/2/sharing/add_folder_member \
    --header "Authorization: Bearer <USER A ACCESS TOKEN>" \
    --header "Content-Type: application/json" \
    --data "{\"shared_folder_id\": \"6607843792\",\"members\": [{\"member\": {\".tag\": \"email\",\"email\": \"<USER B EMAIL ADDRESS>\"}, \"access_level\": \"editor\"}]}"

# null


# user B:
curl -X POST https://api.dropboxapi.com/2/sharing/mount_folder \
    --header "Authorization: Bearer <USER B ACCESS TOKEN>" \
    --header "Content-Type: application/json" \
    --data "{\"shared_folder_id\": \"6607843792\"}"

# {
#   "access_type": {
#     ".tag": "editor"
#   },
#   "is_inside_team_folder": false,
#   "is_team_folder": false,
#   "owner_team": {
#     "id": "dbtid:AAALfOJvW_VA8-yeLzHQ5Pug2GR15Z4t8KI",
#     "name": "TEST API Tester Team"
#   },
#   "path_lower": "/test_377315",
#   "parent_folder_name": "db test",
#   "name": "test_377315",
#   "policy": {
#     "member_policy": {
#       ".tag": "anyone"
#     },
#     "resolved_member_policy": {
#       ".tag": "anyone"
#     },
#     "acl_update_policy": {
#       ".tag": "editors"
#     },
#     "shared_link_policy": {
#       ".tag": "anyone"
#     },
#     "viewer_info_policy": {
#       ".tag": "enabled"
#     }
#   },
#   "preview_url": "https://www.dropbox.com/scl/fo/6d8uprpum4hyb245mqxtp/AAA9RizsOUZYH6ijfW-5upJda?dl=0",
#   "shared_folder_id": "6607843792",
#   "time_invited": "2019-11-08T15:50:50Z",
#   "access_inheritance": {
#     ".tag": "inherit"
#   }
# }

curl -X POST https://api.dropboxapi.com/2/files/create_folder_v2 \
    --header "Authorization: Bearer <USER B ACCESS TOKEN>" \
    --header "Content-Type: application/json" \
    --data "{\"path\": \"/test_377315/test_377315_subfolder\"}"

# {
#   "metadata": {
#     "name": "test_377315_subfolder",
#     "path_lower": "/test_377315/test_377315_subfolder",
#     "path_display": "/test_377315/test_377315_subfolder",
#     "parent_shared_folder_id": "6607843792",
#     "id": "id:25N5ksooX-sAAAAAAAODzw",
#     "sharing_info": {
#       "read_only": false,
#       "parent_shared_folder_id": "6607843792",
#       "traverse_only": false,
#       "no_access": false
#     }
#   }
# }


# user A:
curl -X POST https://api.dropboxapi.com/2/files/list_folder/continue \
    --header "Authorization: Bearer <USER A ACCESS TOKEN>" \
    --header "Content-Type: application/json" \
    --data "{\"cursor\": \"AAFtK3SlwJQEVS58oxqGQTg-HhT_3BPO8S2U8rLrGk4ZJgTFNwHsg_o1cI0gOaaMgTRAoSOKG9Gaol6mo2kfTaoHoPM9Pt1mRJeasvplwOhU9hus15etRG7QT1EXE5Tq9J3xTXDubB21-dNSwbxIPNC2ETnBpHJU4wg29bJQi0DXUUCwz9soVnq9L30etEXf3G3o3T7B9_d1nOm7BeMg7SjRgMd3Okdr-xLWWtpsyIGB6OIeaLEScLp2hT9tpQRlTy5TVnvztKcpDLqw-QmkgnEDCxXpmBnQy3-2JbCrTOIc72j0HSuD8zSAVrqt7qr-M-FPFzsU2n5TOIhYfp3DOSeSlL66ZzjHUHCdmEVddzpFrFQgguBBgo5Mtt5as3M2hRgCLFJmO_3KZ9sVTumNJFLZY8_0BjaN6f7qTgUPkJRQAQ7PVVicci7S7RtPjwrmgMkCTN_t-CaSheFVKUBUKBpyzTGIm6zQFFudmODuF-HaJ4nKAlwcl3e4o-eG0C68w7d5TWGMY02cUB57rTRYTDb7Q8xUzZgf4fFLV7bJNk_lO2c6TwdVaUWLYeJuKno-3Qxugiy8n4--8QcletzCEwELn6ghyuPpEtQ9XXGBG86NghpkO-0R8tBrVonXhU9YDPElVm-dL1BE6B5N2U2yPJx2qaRiyBlAr5QESHU2qO2DxLAr5Ny6FLvlHyWMfrLPrB05CdIoNy3cZQLwrZjPD19RuJIouvqzAvLHVYSWL8-fqXRSmXtodd956K0G5s15XWaB-U4Tv7xB69w9CWicNI2Crb7Dc1qqyjZmYqo8fMsuNqk5LQ8fByxd2VTDR4zwzuGACVj51M9u74T96WGlP1xdoj007X4r4Gd3U0B0dOGDFaFwpnQz7NSH6iZKMcxYtCVAloYtSS_PA2OJIeI4bnwWxWAlQ8vtXRdCzGVYE6Dzv-MIUa-VoghJF1ihivrUsCXv1f4BFLabIJkZNWx7zoMLGzBYkOrMFBS_TPlO-fhSmGNisa0w4JAOOuk2l4rQn6JsQxry6EpPoy2aB2Z3NBr72zovnhTzPJ0qewmN51EOS5wGXKX-HWrOnDD8vhW8nTbQL2SjIA0xGe38xwX0RLkq8pBKvNIWRpv4BmwL13RAK2H6q0HHn1ahqdfYcaKA_7d6p3Lh5YUuTrd9s8pCt6-X8eR9tQ2Nmb1TeysnyD_c4vK5w-qWwk8z6-8WlCwUkC7zc7bRZGWcaqT17VqJR9fLQU883AO1IZXKND_WK2vAYBrgx6MoHyjfBqnMX_9QjVBfC9-73OvVf6e0BPFt86RkeYoahrBKBWxS_jQO3CU0Kfpzx0oQzjIEb2w5CO1Me_qWVmyerzJztN_ri64NaIB-bdWAui8fV7SlG27qBlPvfg\"}"

# {
#   "entries": [
#     {
#       ".tag": "deleted",
#       "name": "test_377315",
#       "path_lower": "/test_377315",
#       "path_display": "/test_377315"
#     },
#     {
#       ".tag": "folder",
#       "name": "test_377315",
#       "path_lower": "/test_377315",
#       "path_display": "/test_377315",
#       "id": "id:25N5ksooX-sAAAAAAAODtw",
#       "shared_folder_id": "6607843792",
#       "sharing_info": {
#         "read_only": false,
#         "shared_folder_id": "6607843792",
#         "traverse_only": false,
#         "no_access": false
#       }
#     }
#   ],
#   "cursor": "AAFrIRZh7nzWCcC6FBFM2NSt_CiBcSXEWpN_kOSXizLxOXJM7Q1JE6WYaZoV7oDIzvbE7xzEdz4eKQWx7b6UwgCjGCqZOxKGMCpErCvtLeDq29D4lM9bYQlJOeXRll4d9LFid4lo0zPiD65QWKO67gYSW8v-PELeIzrfdHEeJEgC2lIKA9owbaL1rgZec7btP0bRBrWHkHLCToNCqA_FIR3lFX6wwsOQExGELI3crD4sJZdaHqqJbLFcCM8MweyEuB8A8fO_MVEMs0Ag-RenNkdtGgxr55QMDZyjYh5oB3pQNXVTzx5Kxa7gfhRJNhP_hUhJhBSRfvem9xYHpvfw0xZaRtZMO05_xQ7_yNtAA06kv1Wd3ymArMDzzP_423NxBsglBjHpnTjirE090N-f5wOlyonR2GDN9NyQgZsdXUN9DGq_-OYwXYaYXKK_xUxGp6GOj3Cw5p8Jc6j_5VuBGEqP_jRQoMEV-kJ19HdX5JU6vldcR_yaqCIzqh9qks2UBLJ9wPP5zycpVdfbpfi9QfwZDYueImKQ4jpHyW6IRyQNTnDFxn-7-7XmNA7eZN50tyyqC0Ws1JTcPb184dRndYEVZwIE4FY1nniShtNwmWYcrsP8x86O4YMnH4MLsKNz6A8glaM191CQ9oq9vfZTwIozYzg7iLmXenluYlwfyIpEKVJw9cnAZEYOFhwl3X8Rvf_wLPC1i8qP6ltJEJg0uCTJWaG2xJgHj3j6qRFfQO8tI4zihsovjyxtjGbwy6VHHsTJmCvbb6HtrflqmbmgZ8HtqUalHEUhz1pUWeurF_JKfazOfD8RYwCfGCKXCiyr_TvhnzOLaW47UaDeU07w0sztWWS8H0zYPdT96xGLJwxu5v1gBr2nNnwtm9OY5Gm4OV_f82fhV3rrlT7tMusH8NaVvOt_M5RrQY3_xlq8wLvR73ildo-6YthgCarb_0JonhCHvMn4Ay_hbQfTkWYa0RIS2kjB4qxNDEmanzDhQPTvrgXrcjv-vsWVLvzZ0KpqCLzh4XxOeqLg7QSXleTnbsiUkYGMZuWz_nIkgHBe9YuN_wVZh31JIt9NxHiZzZUlmnt9_ldQXHcBt30H8TQaemwD5ddZ0mMcQNbtQfVlUBW09pvuSKtPlYQN4xUKp5eyAjSZKpxj0H8Sqx03igstjK_n923zd68w0BF6G54kXV6FKL1Cfh9MOnQNqYWophyVK9Cmgik4JQtsUdfTdweHAki42bUoE_iFlL2qgIyKRIA-uY-D3eQI4T9z8EDRWmSRsQD7YFUe9GuCr8vnxGK-Pe7DwR0nc-3LE7usgf88HGuVpHQ6EQcYb9sNrFWBExQGsIrJfysQgPtmxuX2QIWhv6OleYHvVIeKWtIN8RIaOuUKIiuRZxNo15Z6WfdygmsGx69dYs_ag6J7V3exVEzyo2-D",
#   "has_more": true
# }

curl -X POST https://api.dropboxapi.com/2/files/list_folder/continue \
    --header "Authorization: Bearer <USER A ACCESS TOKEN>" \
    --header "Content-Type: application/json" \
    --data "{\"cursor\": \"AAFrIRZh7nzWCcC6FBFM2NSt_CiBcSXEWpN_kOSXizLxOXJM7Q1JE6WYaZoV7oDIzvbE7xzEdz4eKQWx7b6UwgCjGCqZOxKGMCpErCvtLeDq29D4lM9bYQlJOeXRll4d9LFid4lo0zPiD65QWKO67gYSW8v-PELeIzrfdHEeJEgC2lIKA9owbaL1rgZec7btP0bRBrWHkHLCToNCqA_FIR3lFX6wwsOQExGELI3crD4sJZdaHqqJbLFcCM8MweyEuB8A8fO_MVEMs0Ag-RenNkdtGgxr55QMDZyjYh5oB3pQNXVTzx5Kxa7gfhRJNhP_hUhJhBSRfvem9xYHpvfw0xZaRtZMO05_xQ7_yNtAA06kv1Wd3ymArMDzzP_423NxBsglBjHpnTjirE090N-f5wOlyonR2GDN9NyQgZsdXUN9DGq_-OYwXYaYXKK_xUxGp6GOj3Cw5p8Jc6j_5VuBGEqP_jRQoMEV-kJ19HdX5JU6vldcR_yaqCIzqh9qks2UBLJ9wPP5zycpVdfbpfi9QfwZDYueImKQ4jpHyW6IRyQNTnDFxn-7-7XmNA7eZN50tyyqC0Ws1JTcPb184dRndYEVZwIE4FY1nniShtNwmWYcrsP8x86O4YMnH4MLsKNz6A8glaM191CQ9oq9vfZTwIozYzg7iLmXenluYlwfyIpEKVJw9cnAZEYOFhwl3X8Rvf_wLPC1i8qP6ltJEJg0uCTJWaG2xJgHj3j6qRFfQO8tI4zihsovjyxtjGbwy6VHHsTJmCvbb6HtrflqmbmgZ8HtqUalHEUhz1pUWeurF_JKfazOfD8RYwCfGCKXCiyr_TvhnzOLaW47UaDeU07w0sztWWS8H0zYPdT96xGLJwxu5v1gBr2nNnwtm9OY5Gm4OV_f82fhV3rrlT7tMusH8NaVvOt_M5RrQY3_xlq8wLvR73ildo-6YthgCarb_0JonhCHvMn4Ay_hbQfTkWYa0RIS2kjB4qxNDEmanzDhQPTvrgXrcjv-vsWVLvzZ0KpqCLzh4XxOeqLg7QSXleTnbsiUkYGMZuWz_nIkgHBe9YuN_wVZh31JIt9NxHiZzZUlmnt9_ldQXHcBt30H8TQaemwD5ddZ0mMcQNbtQfVlUBW09pvuSKtPlYQN4xUKp5eyAjSZKpxj0H8Sqx03igstjK_n923zd68w0BF6G54kXV6FKL1Cfh9MOnQNqYWophyVK9Cmgik4JQtsUdfTdweHAki42bUoE_iFlL2qgIyKRIA-uY-D3eQI4T9z8EDRWmSRsQD7YFUe9GuCr8vnxGK-Pe7DwR0nc-3LE7usgf88HGuVpHQ6EQcYb9sNrFWBExQGsIrJfysQgPtmxuX2QIWhv6OleYHvVIeKWtIN8RIaOuUKIiuRZxNo15Z6WfdygmsGx69dYs_ag6J7V3exVEzyo2-D\"}"

# {
#   "entries": [
#     {
#       ".tag": "folder",
#       "name": "test_377315_subfolder",
#       "path_lower": "/test_377315/test_377315_subfolder",
#       "path_display": "/test_377315/test_377315_subfolder",
#       "parent_shared_folder_id": "6607843792",
#       "id": "id:25N5ksooX-sAAAAAAAODzw",
#       "sharing_info": {
#         "read_only": false,
#         "parent_shared_folder_id": "6607843792",
#         "traverse_only": false,
#         "no_access": false
#       }
#     }
#   ],
#   "cursor": "AAFMPTG7mXPepcjHoBadyHfav2CwOyTABJbT7nPJxgGUoTtulmtkgoQT2LrfhHg1PKXd6PnhwepihCKHkKwxDvLXXEKoT9OITYEkdfbfwzFun6jzi5rEARnjq3HnzPVl81aQZ_9xRMBWzjBO80gIqF0rFmAchFGU2U9KY5EBMVvOixr76iFnsVBj-T5YsQbgciv2q-oQG09nn2gG9CljVY7040f_xBaVAJZNRP8GpcMrWtov1IJMhrUe6Dh7deIUygLwBh8WBcTnxG-UhRsCLhcEs67wbt8rBlXjEJKoTwgglxddbK_vP4jcVdDKa0carW82cOgx0_NMNXEEpZT-0krS3SYaAue6wZw3zMK0P4ABtYlbA023gGpqCaQXaPwEhjeD1jVa4hsdh0giD39mbg1zncCWfh8KYad3FHaWYNkS2GgBzg3RGbGGrkUyA-vMsKYfXISKziL7bejJiiamEiLDvP1ECX8qLZQMbL24fViLLNtuci0trvSR6eTlWm1JdhpTjn_unCBx4dD2GNnfYy_CDsnWQKVlChd1u0uu7cvJsgKYHAreXAE8wDxQsXOS58AhREIp773WJX6H3IgN2RDJ52lozaSaW7pvbDKAOG-nAXCHoKfCCGiSXLaPobhLoaWHQOdNTYoH5tFdkncy7FuTweo7fMAOZEpg0VxNoI53Szlz9VGB8wh3KPZHBiTdbpH37UmUAUH3hbE3S3ddPwrUA9-83uq_C3lV8ZsSanNVsSV_nqYxF0sdCK7WYGIlRivrvv4bo_O1fvXnEK9zEQXwK-XS43unZA2zsa3pycKlCwhkFwerQGKDHsswuZw-_R92mAohcTcWo10LiBf316sS3dB5zntRzRM_8qK3ossgcZxTLJ8cvUHm0KJLlr3SQAd2iNg02wbPN2QQyvr27ElSdExFRfayR1TaqYZbH-2GcvdTWhc9C3YnoRQu59_7Du-4_pCKYUQtyNBMt-vZozCh1TweFDw_yRIaez0x8AECRgZThembtgseXJnCTLOx48ndkBIH1G78-EBCnRWBbRk0ht9D_GUgI18YRuMade8m8DK8gR5OcfMcdG06kiaQhfIpTlIGDARGCTIco38_rUL-ZcH1RaLv7bgGAvpFMBW2_BnX_20IzBZGw1EVBmUdrcP1EDi5atN-zabWf7FW3ajEm5Evgg5OATm5MgsMyHSefRh7V2FWbU1l1kbdrBsIeIimiTFXhuqQ6dV6pvw0yjvsalWLzxJr0apDtqoKqnH11aBZ8ok2ly0N-l86gkq8pHlteUM2eXYAfJRq77OzYtenNwYP8EY-2sQ_MbSWdMcKeiNyEqz_nWpDsOoWK3Ek3T17j_BobkY57dE1MpvmZhzh_RyGebcCtfU77rpSaxPL7NUkltSEEwgbCzyNxGxCuBYl8_haQ7tqqb3iOGuhiZxmTEPRmiChGKlmGNkxFSQ8Ng",
#   "has_more": false
# }

Note that when you first share a folder, it is expected that you'll see the removal and re-addition of that folder. (This is due to how Dropbox works on the backend when first sharing a folder. You're essentially removing the non-shared copy of the folder, and mounting the shared folder.)

After that though, I do see the changes from the other user inside the newly mounted shared folder when paging through the /2/files/list_folder/continue results. (Note that also due to some implementation details, these can be returned across multiple pages.)

I'm not seeing the identical repeated results from /2/files/list_folder/continue that you describe though. Can you double check that you're using the latest returned cursor each time, and aren't accidentally re-using the same cursor, for instance?

If you're definitely sending the updated cursor each time, we'll need to investigate this further, as it may be specific to some configuration or account. In that case, please open an API ticket with a sample (like my output above) so we can look into it. Please make sure to redact the access tokens, but please do include the user IDs so we can look into it specifically. Thanks in advance!

Forum Discussion

A shared folder where the non-owner changes content, causes cursor loop with wrong data

About Dropbox API Support & Feedback

Related Content

Changing a folder content preview image?

When I try to upload content using the website, nothing happens.

"Site wasn't available" when downloading content.

Storing and sharing NSFW content

Changing email

Recent Discussions

/oauth2/authorize (code flow) redirects to http://www.dropbox.com/home instead of redirect_uri

Add id and .tag fields to DeletedMetadata in the API

Shared Link - Download in .NET

Dropbox API server root certificate changes for .Net

GetCurrentAccountAsync API Failing for some Team Members while using Impersonation