Need a better understanding on dropbox security integration

To exactly what your plugin has access to?
- Does your plugin access ALL the folders in a dropbox accound, and that we can pick witch folder will be used in your plugin settings ?
- Or is it when we create the dropbox app that we can set (independently of your setting) what will the dropbox starting point (root folder)?

Solution 2 is a lot more secure.

Thanks for your answer