[rubenfonseca]

I think that the /copy_ref links are scoped to the API key.

But anyway, why would Dropbox revoked the API? I would be using the official API, the user had to explicitly share the files and I would have no access to the Root directory of the user (assuming I'm using an Application API Key).

I think that's no different that me generating a share URL from any file of my Dropbox account and posting on reddit for everyone to download :) But I'm no TOS expert :P