#Dropbox help ticket how to
#Dropbox help ticket upgrade
#Dropbox help ticket full

I replied to this request for feedback 3 times and so far in the 2 responses from migration support Mackenzie (Dropbox Support) I got a generic answers with basic instructions on how to use DropBox with links to Dropbox help pages. Please respond to this email if you have feedback on the new experience or if you encounter any issues.' 'Your account has been successfully upgraded to the latest version of Dropbox Business. There is no response to the ticket from Mackenzie

#Dropbox help ticket upgrade

I have pursued this and several other issues related to this upgrade through raising a ticket Ticket #18542943: TEAMS: Recent Upgradeto which I see has been assigned to Mackenzie The only reason I posted in the community is to notify other Dropbox users of the potential for this to happen, if it can happen once it can happen again and unsuspecting users may have their data exposed to others in a way they didn't expect.

#Dropbox help ticket full

In the case in question instead of access only lasting for the few seconds access was actually granted the access lasted long enough for 53.9GB of data to be downloaded into the other account and instead of it being removed when the sync process finally after several hours was blocked from further access, the 53.9 GB of data was moved to the accounts personal folder and renamed as a (shared folder conflict) giving the account full ongoing access to all that data with the original owner of the data completely unaware this security breach had happenedĮssentially this means that because any folder created in or moved to the Team space is now automatically assigned Everyone access, even if you immediately remove that access and restrict access only to selected users you can never be sure whether someone who was not intended to have access can access the contents of that folder possibly for hours and then retain access to what was incorrectly sync'd as a (shared folder conflict)

What Ben has discovered and explained is that if a Team folder obtains Everyone access even for as little as a few seconds, such as will happen when a folder moved to the Team space automatically inherits permissions from that Team space, in as little as a few seconds before those permissions are removed another account that normally doesn't have access to that folder can gain access if that other account is in the process of syncing data to a computer when that brief window of access is granted

Since access was revoked mid-sync, a shared folder conflict was automatically created and moved to your personal folder.' I can see you immediately removed access however since this occurred while the computer was performing the sync, it was enough time for the client to recognise access was given and start syncing. This caused it to inherit the permissions of the teams shared workspace, causing brisbane to gain access. 'On the 9th of September, the Marsupial DropBox user account moved the Marsupial Dropbox folder into the Glascott Group's shared workspace. Why was brisbane able to access the 'Marsupial Dropbox' folder owned by mlmdropbox? This account now contains data it should never have had access too and the other account holder would have no idea this had happenedĮxplanation provided by Ben, a member of the Dropbox advanced support team. When the sync process was complete the folders disappeared from the root folder but upon further examination there is now a folder in the local accounts private folder with the same folder name appended with (shared folder conflict) and it contains 53.9GB of data from the other unrelated account with access 'Only You' indicating they are not copies synced back to the original folders. Selective sync did not list the folders as they were not shared with the account at all so could not be removed by unticking them in selective sync. The initial sync took several hours to complete but during that time the private folders from a different account in the same enterprise were visible and accessible, 117 GB of data not shared at all with the account was available without restriction. The recent upgrade that was pushed out to a company I manage last Thursday 01 Sept 2022 has exposed a serious security bug in the Dropbox upgradeĪfter the upgrade whilst adding a Business DropBox account to a new profile on a new laptop, a folder with several subfolders unrelated to the account I was installing appeared during the sync process.

I have been managing Dropbox for a number of companies for 10 years or more.