[BSERV-7346] Permissions audit: allow project admin to review effective permissions for a particular user - Create and track feature requests for Atlassian products.

XML

Word

Printable

Details

Type: Suggestion
Status: Closed (View Workflow)
Resolution: Fixed
Fix Version/s: 8.5.0
Component/s: Administration - Users and Groups
Labels:
- compliance

UIS:
39
Feedback Policy:

We collect Bitbucket feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

Description

Atlassian status as of Oct 2022

Hi everyone,

I'm happy to announce that in Bitbucket Data Center 8.5 we have completely redesigned repository/project permission page. Repository admins can see not only users with direct permissions, but also users who have access because of permissions assigned on project/global level. For example, if user has read permission for a repository, but also has write permissions for the project, then repository admin will be able to see both permissions in the list. This feature will help repository admins to identify effective permissions of specific users much easier.

Cheers,
Anton Genkin
Product Manager - Bitbucket Data Center

Origin

I have a project with some sensitive repositories and a non-sensitive respository. I need to provide read access to the non-sensitive repository to a user, but he needs to NOT have access to the sensitive repositories.

I got this working, but only after accidentally opening the project up to any logged-in user, and I did not realize this until I was able to request a test user to be created so I could log in as the test user and see what repositories were accessible.

The permissions management would be a LOT easier to verify if you could just see what a particular user sees.

Attachments

Issue Links

is duplicated by

BSERV-8562 As an admin, I want to retrieve an overview of the permissions at any level (including global, project, repository), so that I can have an overview of the access level for every user and group

Closed

BSERV-9748 Create REST endpoints to return permissions for all users and groups

Closed

is related to

BSERV-3894 Exposes effective permissions of a user to plugin's developer and UI

Gathering Interest

relates to

BSERV-9690 Ability to get all users permissions in system

Gathering Interest

mentioned in: Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...

(7 mentioned in)

Activity

People

Assignee:: Unassigned

Reporter:: Jason Sachs

Votes:: 8 Vote for this issue

Watchers:: 11 Start watching this issue

Dates

Created:: 29/Apr/2015 4:29 PM

Updated:: 27/Oct/2022 7:39 AM

Resolved:: 27/Oct/2022 7:39 AM