Skip to main content
Question

API Not Showing "co-owner" Content

  • May 22, 2025
  • 5 replies
  • 16 views

Forum|alt.badge.img

I am trying to view content located inside a folder where I am a co-owner. I am authenticating via JWT and using "as-user" header. Calling the list items endpoint:

https://developer.box.com/reference/get-folders-id-items/

The endpoint itself is returning the one folder I created, but not the one I am a co-owner of. The item count weirdly shows "2", but the actual folder is omitted:

stdClass Object
(
    [total_count] => 2
    [entries] => Array
        (
            [0] => stdClass Object
                (
                    [type] => folder
                    [id] => 123703336333
                    [sequence_id] => 1
                    [etag] => 1
                    [name] => Testing
                )
        )
    [offset] => 0
    [limit] => 100
    [order] => Array
        (
            [0] => stdClass Object
                (
                    [by] => type
                    [direction] => ASC
                )
            [1] => stdClass Object
                (
                    [by] => name
                    [direction] => ASC
                )
        )
)

Does anyone have any experience in dealing with this?

Thanks!

5 replies

Forum|alt.badge.img

The same applies to collections as well. I have added the shared folder to a collection, and called the items endpoint for that collection. The "entries" node returns a 0 element array. However, the "total_count" shows a int of 1.

stdClass Object
(
    [total_count] => 1
    [entries] => Array
        (
        )
    [limit] => 100
    [offset] => 0
)


Forum|alt.badge.img

Hi there! Does the folder for which you are a co-owner belong to a different enterprise than your service account by chance? If so, this may be a function of attempting to use the 'As-User' capability on content owned by an external enterprise.


Forum|alt.badge.img

Hi dandennhardt. Yes, the main "owner" of the folder is from another enterprise. Do you know if this makes it not possible to achieve?


Forum|alt.badge.img

I don't believe there is a way to apply the impersonation (As-User) capability to content in an enterprise outside of your own.

This constraint is in place as a manner of privacy. I.e. if an external party invites a user within your enterprise to collaborate - it establishes a trust relationship between the external party and your user. However, that relationship does not extend to administrators or others in your user's enterprise. Put simply - I trust the user I invited to collaborate on this data, I don't *implicitly* trust his/her colleagues.


Forum|alt.badge.img

Thanks. This is what I was not hoping for.  I do appreciate you replying, and confirming where I was heading.