For ISO purposes, how do you track what user has access to each BitBucket repository?

[Pat Lalonde]

For ISO purposes, how do you track what user has access to each BitBucket project or repository?

Do you have any sort of approval process in place to ensure the manager of the repository has approved access for each user?

Is there an easy way to dump the list of users and groups and see what access rights they have to projects or repositories in BitBucket?

[Ana Retamal]

Hi Pat,

Are you on Cloud or Server?

A user won't have access to a repository unless the owner grants access, which can be done on a user-by-user basis or via a user group. You can check which users have access to a specific repository using this URL https://bitbucket.org/<username>/<reponame>/admin/access (make sure to replace <username> and <reponame> with the actual ones). If the repositories are public, anybody with an account will be able to access them so no approval is required. 

I've checked our API documentation but looks like we don't have those endpoints. If you'd be interested to have those available, you can submit your idea via our Feature request portal.

Hope that helps,

Ana

[Pat Lalonde]

Hi Ana,

We are on Server.   We grant access based on project and repository groups, and individual access and access levels.   Doesn't sound like there is an easy way to extract that as a whole.

--Pat