4 ms·
Be careful when modifying user access to a private BitBucket repository. Their autosuggest for the username input field will show all bitbucket users. Makes it
by fletchowns 10y ago
Be careful when modifying user access to a private BitBucket repository. Their autosuggest for the username input field will show all bitbucket users. Makes it incredibly easy to accidentally grant somebody outside of your organization access to a repository.
- iampims 10y agoI can attest to that. I have the username "tim" on bitbucket and get added to private repos all the time by mistake.
- fletchowns 10y agoOn top of that, there's no audit history of who has had access to a repository. Absolutely ridiculous.