They can open and download files as long as they know the full path, they just can't get directory listings. The code to read a directory uses either of the following Graph calls, based on whether ...