Limit the repositories an OAuth consumer can access

Problem Definition

There are integrations for Bitbucket Cloud using OAuth with the Client Credentials Grant flow (like the Jenkins Bitbucket Branch Source plugin). The access tokens obtained represent the owner of the consumer, and if the OAuth consumer has Repositories permissions then the access tokens have access to all the repositories of the consumer's workspace.

Some users would like to limit the repositories that an OAuth consumer has access to. In the case of Jenkins plugin. they don't want Jenkins to have access to all of their workspace's repos.

Suggested Solution

Allow admins to limit the repositories a certain OAuth consumer can access.