Alongside other files, my company has a few dozen transactions. These transactions are currently stored in a folder called Transactions that everybody has access to and are further divided into three subfolders: Active, Prospective, and Finished. So for example, if I have an actively running transaction named Foobar, it would be stored in Transactions\Active\Foobar\...
What I'm hoping to do is manage the permissions on the individual transaction folders so that only employees who are actively involved in each deal can access those folders. However, when I try to do that with a shared folder, they just appear for the users under the Sharing tab and don't maintain the original folder structure which then becomes unwieldy. I've tried adding users to the base Transaction folder and then just removing them from the individual transaction folders, but that doesn't work since subfolders inherit their parent permissions.
So my question is: Is it possible to manage permissions at the subfolder level while still maintaining the parent folder structure for the users? I suspect that the solution would be an explicit deny function which I've seen suggested on here before, though I don't believe it's been implemented yet. If that's the case, is it being worked on? In any case, I thought it would be worth checking if there were any other options.
Thanks in advance!
Solved! Go to Solution.
since subfolders inherit their parent permissions.
since subfolders inherit their parent permissions.
Thanks for letting me know. Yes, if you could please pass on the "explicit deny" idea to development, I'd appreciate it. It would really help us keep everything organized and accessible.
The question was clear and you marked it as solved although in reality it wasn't really. We're looking to move away from dropbox in our business for this reason alone. Not being able to keep a standard shared folder structure causes massive issues when a team starts growing. This is not convincing.
Bit of an old thread I know...but was back searching the site again hoping there had been some progress. The lack of an explicit deny is probably the most frustrating thing about the dropbox platform for us. We frequently have to share asset folders with outside parties, and there are frequently a subfolder or two that for some reason or another we don't want the outside party to have access to. Explaining that they shouldn't use the stuff in XYZ folder is risky, individually sharing tons of subfolder rather than the root folder to avoid them accessing a couple of items is prohibitevely tedious, moving the assets is not an option as they are needed right where they are at for the internal team. Duplicating the tree and removing the unsharable items is a stopgap that works in the very short term but become impossible to keep track of if you actually try to maintain both trees with updated assets. I know people have been asking for this feature for years, and it has been passed along to the dev team multiple times...is it something that has just been deemed to difficult to implement?
As someone that is just dealing with a similar corporate issue right now let me explain how I see the issue. In my company we have a number of different physical projects we are working on and for each project there are groups of project specific tasks like engineering, finance, etc. I have set up a series of team groups that for example identify all the team members that should have access to the engineering data or finance data. The issue becomes that logically to keep things organized I should use a Team Folder for each project and then set up subfolders inside for engineering, etc. When I assign the groups to each of the subfolder they sync a separate folder for every subfolder their group is assigned to and the overall project heirarchy is not present. Therefore unless you are one of the people that has access to the very top Team Folder (for each project) you don't see all of the subfolders groupsed by project but instead as numerous individual folders on your computer. The only way you can maintain the overall project folder structure is to be added to the top Team Folder level and then you have access to every subfolder.
Even as a starting point it would be extremely helpful if people that are part of groups assigned to subfolders could at a minimum have those subfolders display as part of a top level Team Folder (with project name assigned to it) on their computer synced drive. They don't need to see any of the subfolders they are not assigned to but just having them grouped according to the Team Folder name would be immensely helpful. Otherwise there is no real way to maintain some sort of organizational structure for the data for anyone not assigned at the Team Folder top level.
I hope this makes sense
Community Moderator @ Dropbox
Did this post help you? If so please give it a Like below.
Did this post fix your issue/answer your question? If so please press the 'Accept as Best Answer' button to help others find it.
Still stuck? Ask me a question! (Questions asked in the community will likely receive an answer within 4 hours!)
The way we work is changing. Share and discover new ways to work smarter with Dropbox in our community.Sound good? Let's get started.
For more info on available support options, see this article.
If you found the answer to your question, please 'like' the post to say thanks to the user!