Audit who can still open a Dropbox shared project folder

A project can look private because its direct member list is short while an old link or parent-folder membership still grants access. Dropbox also distinguishes people invited to collaborate from people who only received a view link. An audit needs to follow all three paths before declaring a folder closed. This matters most when a contractor leaves, a draft becomes confidential or an old event ends.

Before you start​

Identify the folder owner, its parent folder and the people who should still edit it. Save a list of authorized collaborators before removal. Do not delete the folder as an access-control shortcut; that affects current work and may propagate through sync. Team admins may apply policies you cannot change as an ordinary member.

Do it step by step​

1. Open the folder on dropbox.com and choose Share. Review the invited member list, each person's role and who can invite others. Confirm whether you are looking at the target folder or a parent or child with different permissions.
2. Remove obsolete direct members using Dropbox's shared-folder controls if you have authority. Consider whether they should keep a local copy; Dropbox warns that removing a member can leave an unsynced copy, depending on the choice made.
3. Inspect view and edit links for the folder and any sensitive files inside it. Disable obsolete links and narrow new ones. A member's loss of direct access does not automatically make a surviving shared link harmless.
4. Check whether access is inherited from a parent shared folder or a team membership. If so, fix the granting path with the owner or admin instead of repeatedly removing a person from a child item that inherits permission.
5. Ask one intended collaborator and one removed collaborator to test access using their own accounts. Do not use an owner session to test revocation; the owner will naturally still open the folder. Record the outcomes.
6. Review public materials and copies already sent outside Dropbox. Inform the project owner if sensitive files were previously downloadable. Schedule another permissions review when the project ends or personnel changes.

Check the result​

Only the intended people can open and edit the live folder through the paths you control; removed members and retired links no longer confer access. The folder contents remain intact for authorized collaborators.

If something goes wrong​

If a removed person can still open it, inspect an active link, parent-folder inheritance and team-level permission. Dropbox says someone can regain access by reopening a still-active link even after removing their own link access. Ask an administrator for inherited roles you cannot edit.

Know the limit​

Access revocation affects future access in Dropbox, not copies already downloaded or access outside your ownership. A collaborator may keep a local copy when removed. Link passwords, expirations and restrictions vary by plan; validate availability in your account. Dropbox unshare and member controls Dropbox link access