Hi,
I have access to the PDF file that was created from a Word file - after logging out of the account, through the browser history.
This looks like an error. Am I right?
Hi again, @rwoj! From what you’ve mentioned so far, and especially since this is happening with Microsoft files, I believe that the issue lies in what’s mentioned here ("When you create/open a new file through Office Online, a link to this file is automatically saved to Dropbox for easy access”).
In that case, I’m afraid it’s not possible to prevent those shared links from being automatically generated, but you can always disable them from your Shared tab, like you’ve done already.
If you wish though, I can pass any feedback you have on this to our development team for you.
@rwoj wrote: I have access to the PDF file that was created from a Word file - after logging out of the account, through the browser history.
You need to provide more information about how you're accessing the file. Where is the file stored? Is this a file in your account or is it from a link that was shared with you from someone else? How are you accessing it; from the Dropbox folder in your computer or the Dropbox website?
Hey @rwoj, sorry for jumping in.
Can you please log out of your Dropbox account once again, and then try to access this file?
Please take a full screenshot of what you see, and attach it in this thread (if there’s any personal info showing, feel free to remove it first).
I'd like to have a visual, and check this further.
Hi Nancy,
I did. I can see I have access to both a Word file and a PDF file generated automatically during printing.
Please note that this time I was working on a Mac, but the first time the situation occurred when I was working on Windows (10). In both cases in Firefox (123.0).
Thanks for these, @rwoj! It looks to me that these are shared links, which is why you can access them even while not logged in to your Dropbox account.
If you go here, are you able to see these files in the list of shared links you’ve created on your Dropbox account?
Hello @Nancy, thank you for your response.
Indeed, the files I mentioned earlier were on the shared list. However, I don't recall sharing them - nor can I find a reason why I would do so.
So I ran a test: I opened Dropobox in my browser and clicked on another Word file that wasn't in the shared links list. The file opened online (Microsoft 365?). I printed it (automatic PDF). From now on, both files (.docx and .pdf) are available through the browser history even after logging out of Dropbox, and links to edit and view the Word file were automatically created.
In fact, there's no need to print - just opening the Word file online automatically adds links for editing and viewing. But - if I then manually remove both links, this no longer happens again.
Thank you in advance for your assistance.
Rob
Hey @rwoj, just to clarify, do you mean that you've never created/copied links to these files and when you simply open them on dropbox.com, links are automatically created for them?
And if so, how did you find the links?
Thanks for the confirmation, Rob.
Dropbox wouldn't really do that, to be honest, so it might be the third party app/integration you're using to print the files.
If you simply create a doc or a PDF file and open it on dropbox.com without printing it, do you see the same behavior?
As I said earlier — just opening a Word file (online) automatically adds links for editing and viewing. If I then manually remove both links, this no longer happens; even if I open the exact same file in the exact same way, the links are not created.
I even created a new folder and a new Microsoft Word document in it – using the Create option inside Dropbox (still via browser). Immediately after opening it, I had two shared links, one for editing and one for viewing. Then, in the same directory, I added a new (empty) Microsoft Excel document. When I clicked on it, it opened in the online editor (Microsoft 365 again) and I immediately had shared links to edit and view.
It doesn’t happen with PDF files. I observed that only with files opened within Microsoft 365 (online). So yes, I do suppose it might be the result of some kind of integration. (The PDF file I wrote about at the very beginning was available through browser history and was generated when printing a Microsoft Word document from an online application.)
That said, I didn’t use any other third party app apart from what is offered inside Dropbox — I thought as part of a deal between Dropbox and Microsoft. I don't remember ever doing anything about it. I don't usually use Dropbox via a browser and I'm not a fan of working in Microsoft applications.
Hi @Nancy, thanks for your reply.
On the page you linked to, I only see this fragment: "When you create a new file through Office Online, a link to this file is automatically saved to Dropbox for easy access". There is no mention of opening a file there.
By the way, automatically creating a link to files in Dropbox – when creating or opening – without a clear warning that such a file can be seen (and even edited) by anyone who has access to the browser history, is at least questionable. And it really doesn't matter what you can find in the documentation about it.
I wasn't aware this was happening. This indicates either a wrong company strategy or bad design. It's hard for me to imagine that a company with Dropbox's experience would make such basic mistakes – so I conclude that this is the strategy. Either way, for me this means a drastic drop in trust.
Anyway, thank you for you assistance.
Hey @rwoj - sorry to jump in here, but I wanted to thank you for the feedback on this. We've passed it on to the team and you can let us know if you have anything else to add.
Thanks so much, Rob.
I believe DropBox has some serious issues. I deleted a shared folder. The people that the folder was shared with were still able to access and upload files to the folder months after deletion. I created a new folder with the same name while I was on the phone with support. During my time on the call some of the files people were able to upload to the old folder automatically showed up in the newly created folder even though it was a completely new folder and wasn't shared.
Hey @dbarrett - sorry to hear about this.
May I ask how those actions are logged in your events page?
Also, since you got in contact with our support team, could you share your ticket's number so that we can look it up in our system as well?
Walter,
I no longer consider the application safe and will be deleting my account so I'm not really interested in sharing any additional information. I simply posted here because I'm not sure the issue was reported by the support person.
