I am using shared datastores in my mobile application for order processing. The merchant is sharing their datastore with customers. The customers can view merchandise and place an order. This means the customer has read/write access to the shared database. This is all fine in the context of my application because I can control what the user can view.
The problem is the developer website. Any user can sign in and go to www.dropbox.com/developers and browse the entire shared datastore including the tables I restrict in my application.
I want to be able to share a datastore only in the context of my application. Is there a way to restrict or prevent the browsing of shared datastores via the web. I only want to share the datastore via API calls from my application.