#1408 Dropbox authentication can be used by other Windows accounts

1.0.6
open
Robin Krom
Plug-in (5)
5
2013-02-06
2012-12-07
Ian Channing
No
0 up votes | 0 down votes | 0%
9 comments

On one machine I have two Windows accounts with two separate dropbox accounts. I installed Greenshot on one account and authenticated the Greenshot installation with that account. I then switched users to the other account and saved a screenshot to Dropbox. This saved and was created in the Dropbox account of the original account.

I understand why this happens as the installation of Greenshot is the same for all users, but Dropbox has a separate installation for each user. So I think that the second Windows/Dropbox account should have to re-authenticate.

Interestingly I had to re-authenticate using the same Dropbox account on different computers.

Discussion

  • Robin Krom
    Robin Krom
    2012-12-07

    Hi Ian,

    this confuses me, and should definitively not happen!

    Please tell me how you installed Greenshot, did you use the installer or download the .zip?

    The authentication is only for that PC, as it's only known there, not for Greenshot in generall. Unless you would "synchronize" the configuration among PC's.

    Best wishes,
    Robin

     
  • Ian Channing
    Ian Channing
    2012-12-07

    Hi Robin,

    Thanks for the quick response, again! I used the installer. The authentication only being for that PC makes sense - and agrees with what I found - I had to re-authenticate when using a different PC.

    I've got some more info on this now. On the same PC there's actually 3 Windows accounts all with different Dropbox accounts. Just now after I'd switched off the PC, the third user, restarted the machine and logged on. This now correctly asked the third user to authenticate their Dropbox account.

    What is different is that with the second user (the one I had the initial problem with), I was still logged on at the time and had selected 'Switch User' from the Start Menu to get from my account to the second account.

    Cheers,

    Ian

     
  • Robin Krom
    Robin Krom
    2012-12-07

    Still, switch user should give you a new desktop running as a different user...
    You had to start Greenshot again for the other user, so this should have created/loaded the ini file for that user...

    I'm a bit confused... Will need to test this, maybe I am just understanding your scenario wrong.
    Could you check where the ini files got written to? Open the "About Greenshot" from the context menu and press the "i" key, this should make windows open the file... At least you should be able to see where it got written.

    Best wishes,
    Robin

     
  • Ian Channing
    Ian Channing
    2012-12-08

    Hi Robin,

    I think the issue is that the first account I installed it on was a standard account - so you have to login as the administrator account to install Greenshot. This meant that it put the Dropbox authentication for the standard user in the administrator's account ini file. The second account I switched to was the administrator account, which duly had the Dropbox authentication in it. I've attached the two ini files (blatting the Dropbox Token and TokenSecret). What you'll see is that the administrator ini file has the Dropbox authentication but the standard user doesn't.

    Cheers,

    Ian

     
  • Ian Channing
    Ian Channing
    2012-12-08

    Admin account ini file (secondary user)

     
  • Ian Channing
    Ian Channing
    2012-12-08

    Standard account ini file - the account I normally use and authenticated against Dropbox with

     
  • Robin Krom
    Robin Krom
    2013-02-06

    Hi Ian,
    due to the amouth of tickets I worked on, I don't really recall if we still need to do something or if the problem is something special... please let me know if you are still having expectations... (sorry for asking)

    Best wishes,
    Robin

     

  • Anonymous
    2013-02-06

    Hi Robin,

    It certainly won't be an issue if non-admins follow your path of installing to the AppData directory without admin permissions.

    Its also not a problem for me as I was just testing the installation rather than expecting that my mother-in-law is going to need screen capture tools :)

    I haven't tried re-testing with your latest installer, but I assume that the issue will still be there unless you did something to specifically prevent it.

    Cheers,

    Ian

     
  • Ian Channing
    Ian Channing
    2013-02-06

    Anonymous comment was from me, didn't realise I wasn't logged in :)

    Ian