Sub-scope synchronization

A system for synchronizing data between an online data source and a client application, the system comprising

• a user device including a memory storing the client application and an electronic processor configured to execute the client application to
• in response to a change in a permission associated with a user to a first data set included in a shared data space of the online data source,
• receive a data synchronization token from the online data source associated with the first data set,
• download the first data set included in the shared data space from the online data source to the client application using the data synchronization token without re-downloading a second data set included in the shared data space, and
• after downloading the first data set, synchronize the shared data space, including the first data set and the second data set, between the online data source and the client application using a stored data space synchronization token and the data synchronization token associated with the first data set.

A non-transitory computer-readable medium storing instructions that, when executed by an electronic processor, perform a set of functions, the set of functions including

• in response to a change in a permission associated with a user to data included in a shared data space of an online data source, the change in the permission including the withdrawal of a permission to a protected data set included in the stored data space
• receiving, at a client application, a revocation notice from the online data source for a previously received protected data synchronization token associated with the protected data set;
• and
• in response to the revocation notice,
• deleting the protected data synchronization token,
• deleting the protected data set from a locally-stored copy of the shared data space without deleting a public data set from the locally-stored copy of the shared data space, and
• after deleting the protected data set, synchronizing the shared data space, including the public data set and excluding the protected data set, between the online source and the client application using a stored data space synchronization token.