<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Able to download non shared files using API in Dropbox API Support &amp; Feedback</title>
    <link>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Able-to-download-non-shared-files-using-API/m-p/611362#M28275</link>
    <description>&lt;P&gt;Ok, that makes sense.&amp;nbsp; Thanks for the help.&lt;/P&gt;</description>
    <pubDate>Fri, 22 Jul 2022 17:25:09 GMT</pubDate>
    <dc:creator>TC888</dc:creator>
    <dc:date>2022-07-22T17:25:09Z</dc:date>
    <item>
      <title>Able to download non shared files using API</title>
      <link>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Able-to-download-non-shared-files-using-API/m-p/611195#M28266</link>
      <description>&lt;P&gt;I need to build a simple tool for downloading shared files that can run as a cron job, so I'm learning the API and Java SDK.&amp;nbsp; In my tinkering, I've encountered some behavior that I don't understand.&amp;nbsp; I created an account using my work email, then created an app with that account and genreated a token.&amp;nbsp; Then, in a different browser, I created another account using my personal email and put a couple test files there.&amp;nbsp; Using the Java SDK and the access token I generated from my work account, I was able to download files from my personal account that were not shared.&amp;nbsp; There was nothing in my code that would identify me as the owner of that account, so I don't see how that should be possible.&amp;nbsp; Is this a bug?&amp;nbsp; Was it able to identify me by my IP?&amp;nbsp; Is the link generated by "copy link" usable by anyone without authentication?&amp;nbsp; Just trying to get my head around this.&lt;/P&gt;</description>
      <pubDate>Mon, 25 Jul 2022 21:20:04 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Able-to-download-non-shared-files-using-API/m-p/611195#M28266</guid>
      <dc:creator>TC888</dc:creator>
      <dc:date>2022-07-25T21:20:04Z</dc:date>
    </item>
    <item>
      <title>Re: Able to download non shared files using API</title>
      <link>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Able-to-download-non-shared-files-using-API/m-p/611219#M28267</link>
      <description>&lt;BLOCKQUOTE&gt;&lt;HR /&gt;&lt;a href="https://www.dropboxforum.com/t5/user/viewprofilepage/user-id/1558786"&gt;@TC888&lt;/a&gt;&amp;nbsp;wrote:&lt;BR /&gt;&lt;P&gt;...&amp;nbsp; Is this a bug?&amp;nbsp; ...&lt;/P&gt;&lt;HR /&gt;&lt;/BLOCKQUOTE&gt;&lt;P&gt;Hi &lt;a href="https://www.dropboxforum.com/t5/user/viewprofilepage/user-id/1558786"&gt;@TC888&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;If you can access non shared file in such a way that for sure would be a bug. Is the file non shared really? &lt;img class="lia-deferred-image lia-image-emoji" src="https://www.dropboxforum.com/html/@9AD39CA637682E9616FBE31CDAF1B6C4/emoticons/1f914.png" alt=":thinking_face:" title=":thinking_face:" /&gt; Taking in account following:&lt;/P&gt;&lt;BLOCKQUOTE&gt;&lt;HR /&gt;&lt;a href="https://www.dropboxforum.com/t5/user/viewprofilepage/user-id/1558786"&gt;@TC888&lt;/a&gt;&amp;nbsp;wrote:&lt;BR /&gt;&lt;P&gt;...&amp;nbsp; Is the link generated by "copy link" usable by anyone without authentication? ...&lt;/P&gt;&lt;HR /&gt;&lt;/BLOCKQUOTE&gt;&lt;P&gt;Most probably you are talking here for a shared link. If so, Yes - that's the idea of shared link - providing access to particular resource (file/folder) without account authentication. &lt;img class="lia-deferred-image lia-image-emoji" src="https://www.dropboxforum.com/html/@41457EF40051AFF130FDBFE21B496926/emoticons/1f609.png" alt=":winking_face:" title=":winking_face:" /&gt; Clarify to yourself what actually you are doing! Shared link associated resource can be downloaded with App Authentication, without account authentication.&lt;/P&gt;&lt;P&gt;Hope this helps.&lt;/P&gt;</description>
      <pubDate>Fri, 22 Jul 2022 02:22:52 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Able-to-download-non-shared-files-using-API/m-p/611219#M28267</guid>
      <dc:creator>Здравко</dc:creator>
      <dc:date>2022-07-22T02:22:52Z</dc:date>
    </item>
    <item>
      <title>Re: Able to download non shared files using API</title>
      <link>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Able-to-download-non-shared-files-using-API/m-p/611220#M28268</link>
      <description>&lt;P&gt;&lt;a href="https://www.dropboxforum.com/t5/user/viewprofilepage/user-id/1558786"&gt;@TC888&lt;/a&gt; It seems like Здравко has figured this out. It sounds like the link you are referring to is a "&lt;A href="https://help.dropbox.com/files-folders/share/view-only-access" target="_blank"&gt;shared link&lt;/A&gt;", which can be accessed by other accounts by default. This is a sharing feature that allows one user to share files or folders with other users just via that link. &lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Here are some guides that may be helpful:&lt;/P&gt;
&lt;UL&gt;
&lt;LI&gt;&lt;A href="https://www.dropbox.com/developers/reference/getting-started" target="_blank"&gt;https://www.dropbox.com/developers/reference/getting-started&lt;/A&gt; &lt;/LI&gt;
&lt;LI&gt;&lt;A href="https://developers.dropbox.com/dbx-file-access-guide" target="_blank"&gt;https://developers.dropbox.com/dbx-file-access-guide&lt;/A&gt; &lt;/LI&gt;
&lt;LI&gt;&lt;A href="https://developers.dropbox.com/dbx-sharing-guide" target="_blank"&gt;https://developers.dropbox.com/dbx-sharing-guide&lt;/A&gt; &lt;/LI&gt;
&lt;/UL&gt;</description>
      <pubDate>Fri, 22 Jul 2022 02:49:20 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Able-to-download-non-shared-files-using-API/m-p/611220#M28268</guid>
      <dc:creator>Greg-DB</dc:creator>
      <dc:date>2022-07-22T02:49:20Z</dc:date>
    </item>
    <item>
      <title>Re: Able to download non shared files using API</title>
      <link>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Able-to-download-non-shared-files-using-API/m-p/611362#M28275</link>
      <description>&lt;P&gt;Ok, that makes sense.&amp;nbsp; Thanks for the help.&lt;/P&gt;</description>
      <pubDate>Fri, 22 Jul 2022 17:25:09 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Dropbox-API-Support-Feedback/Able-to-download-non-shared-files-using-API/m-p/611362#M28275</guid>
      <dc:creator>TC888</dc:creator>
      <dc:date>2022-07-22T17:25:09Z</dc:date>
    </item>
  </channel>
</rss>

