2219 - MM5 access to Dropbox ... why ask for access to everything?

Report bugs & feature requests for MediaMonkey 5 and learn about the newest builds.

Moderator: Gurus

Barry4679
Posts: 949
Joined: Fri Sep 11, 2009 8:07 am
Location: Australia
Contact:

2219 - MM5 access to Dropbox ... why ask for access to everything?

Post by Barry4679 » Mon Jan 13, 2020 5:44 am

MM5 asks for, and gets full access to all of the user's Dropbox files and folders.

Is this necessary? Is it it wise?

Alternatively Dropbox allows apps to request just "app folder" permissions, which would restrict your access to only a MediaMonkey folder, in the user's App folder.

Wouldn't this suit most people better? ... Are people really going to want to grant you more access than is necessary?

As it is, a MM user is warned against allowing MM5 access to their Dropbox library, due to MM's "small number of users" ... I don't think that this would happen if you only requested App level access.

From the Dropbox Reference Guide:

App permissions
When you start building an app on the DBX Platform, you'll need to create a Dropbox app in the App Console. As part of the process, you'll need to choose the right permission for your app. Your app's permission (sometimes referred to as access type in the documentation) determines what data your app can access in a user's Dropbox.

App folder
A dedicated folder named after your app is created within the Apps folder of a user's Dropbox. Your app gets read and write access to this folder only and users can provide content to your app by moving files into this folder.

Full Dropbox
You get full access to all the files and folders in a user's Dropbox.

Your app should use the least privileged permission it can
.