For private workspaces, users in a User group that does not have at least 'Create repo' permissions, are not able to view repos listed when opening the Workspace URL

Issue Summary

For private workspaces, users in a User group that does not have at least 'Create repo' permissions, are not able to view repos listed when opening the Workspace URL

Steps to Reproduce

1. Create a Bitbucket User 1
2. Create a Bitbucket User 2
3. Log in to Bitbucket User 1
4. Create a Workspace, Workspace1
5. In this workspace's Settings, check the option Keep this workspace private, and then Update workspace
6. In Workspace1, create a new User Group, 'Test Users'
7. Default repository access does not matter, select whatever you want
8. Leave 'Create repositories' and 'Administer workspace' options unchecked
9. Add Bitbucket User 2 in 'Test Users' of Workspace1

Then:

1. Log in to Bitbucket with Bitbucket User 2
2. Accept the invitation to Workspace1
3. Open the page https://bitbucket.org/workspace1/

Notes: the same issue occurs if Bitbucket User 2 tries to access any workspace URL, like

• https://bitbucket.org/workspace1/workspace/repositories
• https://bitbucket.org/workspace1/workspace/projects/
• https://bitbucket.org/workspace1/workspace/snippets/
• https://bitbucket.org/workspace1/workspace/members/

Expected Results

The page lists the Workspace repos this user has access to

Actual Results

The user sees a message saying:

You were never here
The contents of this workspace are highly confidential. Let's keep this visit between us.

Workaround

There is no workaround at the moment.
The URLs above will work for affected users if a workspace admin:

• either deselects the private profile for the workspace
• or gives to the user groups at least Create repositories permissions