Child Item

App Folder permission - getting shared_link_access_denied for public shared link URLs?

Note: I just created a new App Key/Secret for my App to - I'm now using the App Folder permission instead of Full Permission (which I believe is way less scary for users to grant permission and appropriate for my App too). This flow used to work with my old App Key/Secret.

I have a shared_link: https://www.dropbox.com/sh/hyt61zo702g3c5c/AACT5_YdGoZiEyYt4yI6Oolaa?dl=0

I can access it without being logged in at all. You should be able to as well.

I have an access token, and make a request to https://api.dropboxapi.com/2/files/list_folder

I get the 4 files in that folder, one of which looks like:

.tag: "file"
name: "Amazing Grace.pro"
id: "id:zY8_f7IMoCgAAAAAAAE7EA"
client_modified: "2018-04-29T16:52:44Z"
server_modified: "2018-04-29T16:52:45Z"
rev: "3ca8a5fcf0"
size: 1239
is_downloadable: true
content_hash: "ec5e7fd14465c71b3979e64cd68cff300c3eecfd8cb1ef72c0d427743350d82f"

So next I make a request to https://content.dropboxapi.com/2/sharing/get_shared_link_file with args:{"url":"https://www.dropbox.com/sh/hyt61zo702g3c5c/AACT5_YdGoZiEyYt4yI6Oolaa?dl=0","path":"/Amazing Grace.pro"}

And I get:

{"error_summary": "shared_link_access_denied/", "error": {".tag": "shared_link_access_denied"}}

[Note: the documentation on http://dropbox.github.io/dropbox-sdk-js/Dropbox.html is missing the type def for the arg to

sharingGetSharedLinkFile]

@Greg-DB who's been helpful

Find more posts tagged with

API

Abuse

Comments

Greg-DB

Thanks for the report! This looks like this may just be an issue on our side. We'll look into it. I'll follow up here once I have an update on this from the team.

elsigh

Any updates by chance? Confirmation that this is a bug vs by design would help me.

Seems like a punishment for picking a better permission model atm

Greg-DB

I don't have an update on this from the team yet. I'll follow up here once I do.

mkamalkayani

Facing the same error. Any updates?

Greg-DB

@mkamalkayani No, unfortunately I don't have an update on this issue to share.

mkamalkayani

@Greg-DB I got it working by creating a new app with full access scope.

akunbeben

A year after, is there any update on this? @10

Greg-DB

@akunbeben No, I don't have any news on this.

Greg-DB

Update: the /2/sharing/get_shared_link_metadata and /2/sharing/get_shared_link_file endpoints (and corresponding methods in the SDKs) should now work when using an access token for an app with the app folder access type.