I am building a Security Audit solution for "Dropbox for Business" clients. The main information source is the new Business API - Audit Log endpoint (https://api.dropbox.com/1/team/log/get_events)
In sharing events, there seem be to two different way of referencing the Shared Folder
Events that specify the folder's full path:
{
event_type: "shmodel_create"`
member_id: null
info_dict:
{
path: "/Folder1/Folder2"
}
ip_address: "123.123.123.123"
user_id: 123123123
name: "Some Username"
country: "US"
event_type_description: "Created a new link"
event_category: "sharing"
time: "2014-08-12T08:18:03+00:00"
email: "some.username@company.com"
}
Events that specify only the folder's name:
{
event_type: "sf_create"
member_id: "dbmid:--- memberID ---"
info_dict:
{
folder_name: "Folder2"
}
ip_address: "123.123.123.123"
user_id: 123123123
name: "Some Username"
country: "US"
event_type_description: "Created a shared folder"
event_category: "sharing"
time: "2014-12-01T11:13:14+00:00"
email: "some.username@company.com"
}
I can use the first type to associate the event with a certain business resource (folder), but the second one seems useless - In the case of sharing two different folders with the same immediate name - the event looks exactly the same. there is no way to differentiate which is which.
This is true for many types of events! Generally, all link sharing events are generated with full path reference, while invitation/collaboration sharing events generated with "folder_name" reference.
How is one supposed to resolve the the second tyoe "folder_name" reference to a full path?
How can I identify the folder that the share event is referencing?
