<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Business API - Audit Log - Share event missing critical information in Dropbox API Support &amp; Feedback</title>
    <link>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Business-API-Audit-Log-Share-event-missing-critical-information/m-p/7438#M323</link>
    <description>&lt;P&gt;I am building a Security Audit solution for "Dropbox for Business" clients. The main information source is the new Business API - Audit Log endpoint (&lt;A href="https://api.dropbox.com/1/team/log/get_events" rel="nofollow noreferrer" target="_blank"&gt;https://api.dropbox.com/1/team/log/get_events&lt;/A&gt;)&lt;/P&gt;

&lt;P&gt;In sharing events, there seem be to two different way of referencing the Shared Folder&lt;/P&gt;

&lt;P&gt;Events that specify the folder's full path:&lt;/P&gt;

&lt;P&gt;{&lt;BR /&gt;&lt;BR /&gt;
event_type: "shmodel_create"`&lt;BR /&gt;
member_id: null&lt;BR /&gt;
info_dict: &lt;BR /&gt;
{&lt;BR /&gt;
    path: "/Folder1/Folder2"&lt;BR /&gt;
}&lt;BR /&gt;&lt;BR /&gt;
ip_address: "123.123.123.123"&lt;BR /&gt;
user_id: 123123123&lt;BR /&gt;
name: "Some Username"&lt;BR /&gt;
country: "US"&lt;BR /&gt;
event_type_description: "Created a new link"&lt;BR /&gt;
event_category: "sharing"&lt;BR /&gt;
time: "2014-08-12T08:18:03+00:00"&lt;BR /&gt;
email: "&lt;A href="mailto:some.username@company.com" rel="nofollow noreferrer" target="_blank"&gt;some.username@company.com&lt;/A&gt;"&lt;BR /&gt;
}&lt;BR /&gt;
Events that specify only the folder's name:&lt;/P&gt;

&lt;P&gt;{&lt;BR /&gt;
event_type: "sf_create"&lt;BR /&gt;
member_id: "dbmid:--- memberID ---"&lt;BR /&gt;
info_dict: &lt;BR /&gt;
{&lt;BR /&gt;
    folder_name: "Folder2"&lt;BR /&gt;
}&lt;BR /&gt;&lt;BR /&gt;
ip_address: "123.123.123.123"&lt;BR /&gt;
user_id: 123123123&lt;BR /&gt;
name: "Some Username"&lt;BR /&gt;
country: "US"&lt;BR /&gt;
event_type_description: "Created a shared folder"&lt;BR /&gt;
event_category: "sharing"&lt;BR /&gt;
time: "2014-12-01T11:13:14+00:00"&lt;BR /&gt;
email: "&lt;A href="mailto:some.username@company.com" rel="nofollow noreferrer" target="_blank"&gt;some.username@company.com&lt;/A&gt;"&lt;BR /&gt;
}&lt;BR /&gt;
I can use the first type to associate the event with a certain business resource (folder), but the second one seems useless - In the case of sharing two different folders with the same immediate name - the event looks exactly the same. there is no way to differentiate which is which.&lt;/P&gt;

&lt;P&gt;This is true for many types of events! Generally, all link sharing events are generated with full path reference, while invitation/collaboration sharing events generated with "folder_name" reference.&lt;/P&gt;

&lt;P&gt;How is one supposed to resolve the the second tyoe "folder_name" reference to a full path?&lt;BR /&gt;
How can I identify the folder that the share event is referencing?&lt;/P&gt;</description>
    <pubDate>Wed, 29 May 2019 09:46:32 GMT</pubDate>
    <dc:creator>Cloud D.</dc:creator>
    <dc:date>2019-05-29T09:46:32Z</dc:date>
    <item>
      <title>Business API - Audit Log - Share event missing critical information</title>
      <link>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Business-API-Audit-Log-Share-event-missing-critical-information/m-p/7438#M323</link>
      <description>&lt;P&gt;I am building a Security Audit solution for "Dropbox for Business" clients. The main information source is the new Business API - Audit Log endpoint (&lt;A href="https://api.dropbox.com/1/team/log/get_events" rel="nofollow noreferrer" target="_blank"&gt;https://api.dropbox.com/1/team/log/get_events&lt;/A&gt;)&lt;/P&gt;

&lt;P&gt;In sharing events, there seem be to two different way of referencing the Shared Folder&lt;/P&gt;

&lt;P&gt;Events that specify the folder's full path:&lt;/P&gt;

&lt;P&gt;{&lt;BR /&gt;&lt;BR /&gt;
event_type: "shmodel_create"`&lt;BR /&gt;
member_id: null&lt;BR /&gt;
info_dict: &lt;BR /&gt;
{&lt;BR /&gt;
    path: "/Folder1/Folder2"&lt;BR /&gt;
}&lt;BR /&gt;&lt;BR /&gt;
ip_address: "123.123.123.123"&lt;BR /&gt;
user_id: 123123123&lt;BR /&gt;
name: "Some Username"&lt;BR /&gt;
country: "US"&lt;BR /&gt;
event_type_description: "Created a new link"&lt;BR /&gt;
event_category: "sharing"&lt;BR /&gt;
time: "2014-08-12T08:18:03+00:00"&lt;BR /&gt;
email: "&lt;A href="mailto:some.username@company.com" rel="nofollow noreferrer" target="_blank"&gt;some.username@company.com&lt;/A&gt;"&lt;BR /&gt;
}&lt;BR /&gt;
Events that specify only the folder's name:&lt;/P&gt;

&lt;P&gt;{&lt;BR /&gt;
event_type: "sf_create"&lt;BR /&gt;
member_id: "dbmid:--- memberID ---"&lt;BR /&gt;
info_dict: &lt;BR /&gt;
{&lt;BR /&gt;
    folder_name: "Folder2"&lt;BR /&gt;
}&lt;BR /&gt;&lt;BR /&gt;
ip_address: "123.123.123.123"&lt;BR /&gt;
user_id: 123123123&lt;BR /&gt;
name: "Some Username"&lt;BR /&gt;
country: "US"&lt;BR /&gt;
event_type_description: "Created a shared folder"&lt;BR /&gt;
event_category: "sharing"&lt;BR /&gt;
time: "2014-12-01T11:13:14+00:00"&lt;BR /&gt;
email: "&lt;A href="mailto:some.username@company.com" rel="nofollow noreferrer" target="_blank"&gt;some.username@company.com&lt;/A&gt;"&lt;BR /&gt;
}&lt;BR /&gt;
I can use the first type to associate the event with a certain business resource (folder), but the second one seems useless - In the case of sharing two different folders with the same immediate name - the event looks exactly the same. there is no way to differentiate which is which.&lt;/P&gt;

&lt;P&gt;This is true for many types of events! Generally, all link sharing events are generated with full path reference, while invitation/collaboration sharing events generated with "folder_name" reference.&lt;/P&gt;

&lt;P&gt;How is one supposed to resolve the the second tyoe "folder_name" reference to a full path?&lt;BR /&gt;
How can I identify the folder that the share event is referencing?&lt;/P&gt;</description>
      <pubDate>Wed, 29 May 2019 09:46:32 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Business-API-Audit-Log-Share-event-missing-critical-information/m-p/7438#M323</guid>
      <dc:creator>Cloud D.</dc:creator>
      <dc:date>2019-05-29T09:46:32Z</dc:date>
    </item>
    <item>
      <title>Re: Business API - Audit Log - Share event missing critical information</title>
      <link>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Business-API-Audit-Log-Share-event-missing-critical-information/m-p/7439#M324</link>
      <description>&lt;P&gt;Cross-linking with Stack Overflow: &lt;A href="http://stackoverflow.com/questions/27706669/business-api-audit-log-share-event-missing-critical-information" rel="nofollow noreferrer"&gt;http://stackoverflow.com/questions/27706669/business-api-audit-log-share-event-missing-critical-information&lt;/A&gt;.&lt;/P&gt;</description>
      <pubDate>Wed, 31 Dec 2014 08:55:33 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Business-API-Audit-Log-Share-event-missing-critical-information/m-p/7439#M324</guid>
      <dc:creator>Steve M.</dc:creator>
      <dc:date>2014-12-31T08:55:33Z</dc:date>
    </item>
    <item>
      <title>Re: Business API - Audit Log - Share event missing critical information</title>
      <link>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Business-API-Audit-Log-Share-event-missing-critical-information/m-p/7440#M325</link>
      <description>&lt;P&gt;Unfortunately there is not currently a way to uniquely identify a shared folder from the audit log.&lt;/P&gt;

&lt;P&gt;As a temporary solution, you could use the /shared_folders endpoint (&lt;A href="https://www.dropbox.com/developers/core/docs#shared-folders" rel="nofollow noreferrer"&gt;https://www.dropbox.com/developers/core/docs#shared-folders&lt;/A&gt;) for the given user account to get a list of their shared folders, and match against these shared folder names. This has some edge cases, but should work in many situations.&lt;/P&gt;

&lt;P&gt;Shared folder and shared link (shmodel) API support is a work in process, and this is one of the known requests we hope to address.&lt;/P&gt;</description>
      <pubDate>Wed, 31 Dec 2014 15:48:20 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Business-API-Audit-Log-Share-event-missing-critical-information/m-p/7440#M325</guid>
      <dc:creator>Josh S.1</dc:creator>
      <dc:date>2014-12-31T15:48:20Z</dc:date>
    </item>
  </channel>
</rss>

