Uploaded image for project: 'Bitbucket Data Center'
  1. Bitbucket Data Center
  2. BSERV-10926

Dashboard returns 401 when user loses permissions to repository recently pushed to

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: High High
    • 5.15.0
    • 5.7.0, 5.11.1, 5.14.0
    • Dashboard, UI

      Summary

      Bitbucket Server returns a 401 ("You are not permitted to view this page" error) on the dashboard when a user has recent pushes to repositories they no longer have access to.

      Steps to reproduce

      1. Create a user (not a system admin) and give it permissions to a particular repository (or project)
      2. Push to the repository as that user
      3. Revoke permissions for the repository (or project) for this user
      4. View the dashboard page

      Expected

      Dashboard page loads correctly, with the recent pushes to the repository that the user no longer has access to filtered out.

      Actual

      The dashboard page does not load correctly (a 401 error page is returned). Note that if you remain on the dashboard while permissions are revoked, the XHR request to pull request suggestions will throw a 401, but the page will still work.

          Form Name

            [BSERV-10926] Dashboard returns 401 when user loses permissions to repository recently pushed to

            Stefan added a comment -

            ymartin - as a possible workaround, you can be granted at least REPOSITORY_READ permissions to the repository you pushed to. Note that the dashboard only shows recent pushes in the last 48 hours, so after 48 hours it should be possible to access the dashboard again.

            Stefan added a comment - ymartin - as a possible workaround, you can be granted at least REPOSITORY_READ permissions to the repository you pushed to. Note that the dashboard only shows recent pushes in the last 48 hours, so after 48 hours it should be possible to access the dashboard again.

            I faced same issue because of "recently viewed" repositories listing.

            That is really annoying. I cannot keep permissions on a project I have been granted temporarily...

            Is there any workaround to get back my dashboard after permission removal ?

            Yves Martin added a comment - I faced same issue because of "recently viewed" repositories listing. That is really annoying. I cannot keep permissions on a project I have been granted temporarily... Is there any workaround to get back my dashboard after permission removal ?

              spetrucev Stefan
              voseghale VICTOR-OSEGHALE (Inactive)
              Affected customers:
              5 This affects my team
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: