{"action":"opened","issue":{"url":"https://api.github.com/repos/subdavis/Tusk/issues/131","repository_url":"https://api.github.com/repos/subdavis/Tusk","labels_url":"https://api.github.com/repos/subdavis/Tusk/issues/131/labels{/name}","comments_url":"https://api.github.com/repos/subdavis/Tusk/issues/131/comments","events_url":"https://api.github.com/repos/subdavis/Tusk/issues/131/events","html_url":"https://github.com/subdavis/Tusk/issues/131","id":310471401,"number":131,"title":"Use 'App folder' dropbox permission to restrict Tusk's access to user's entire dropbox","user":{"login":"antipasta","id":1386605,"avatar_url":"https://avatars1.githubusercontent.com/u/1386605?v=4","gravatar_id":"","url":"https://api.github.com/users/antipasta","html_url":"https://github.com/antipasta","followers_url":"https://api.github.com/users/antipasta/followers","following_url":"https://api.github.com/users/antipasta/following{/other_user}","gists_url":"https://api.github.com/users/antipasta/gists{/gist_id}","starred_url":"https://api.github.com/users/antipasta/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/antipasta/subscriptions","organizations_url":"https://api.github.com/users/antipasta/orgs","repos_url":"https://api.github.com/users/antipasta/repos","events_url":"https://api.github.com/users/antipasta/events{/privacy}","received_events_url":"https://api.github.com/users/antipasta/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-04-02T12:21:40Z","updated_at":"2018-04-02T12:21:40Z","closed_at":null,"author_association":"NONE","body":"## This issue is a \r\n\r\n- [ ] bug\r\n- [X] feature\r\n- [ ] question\r\n\r\n<!-- \r\n- [x] is a checked box \r\n- [ ] is an empty box\r\n-->\r\n\r\n### Please describe the current behavior, and explain why it's bad.\r\n\r\n<!-- \r\n  First, read https://github.com/subdavis/Tusk/wiki/Troubleshooting \r\n  If you have an issue covered in the troubleshooting guide, please\r\n  explain what steps you took and how to reproduce your issue.\r\n-->\r\n\r\nDropbox support currently requires full read/write permission to all files in dropbox. This is a potential security risk if you have other sensitive files in your dropbox, especially since Tusk only needs access to the keepass db.\r\n\r\n### Please describe how you think it should change.\r\nProvide the option for the 'app folder' dropbox permission, which creates a folder in the user's dropbox that the user moves files into to give Tusk access to them. This would fulfill the principle of least privilege for users that don't mind keeping their keepass db in Tusk's dropbox app folder. https://www.dropbox.com/developers/reference/developer-guide#app-permissions\r\n"}}
{"actor":{"display_login":"antipasta"}}