View group members in Stash

[Deleted user]

Hi,

if a user has administrator rights for a repository or a project, is there a possibility that he can view the members of groups? This would be helpful when he wants to grant permissions to a group.

Also, is it possible to create a report in stash to see who has rights where?

Thank you,

Andreas

[Michael Heemskerk · Accepted solution]

You can see which users are part of which group by clicking on the group in question under Administration > Groups. Likewise, you can see which groups a user is part of by clicking on the user in Administration > Users.

Stash currently does not provide a report that allows you to see all permissions for all users. There is a REST API that you can use to retrieve the granted permissions at the global, project and repository level, but there's no endpoint to retrieve the _effective_ permissions for a user (taking into account all permissions granted to a user + all the groups the user is member of).

Edit: I had missed the "administrator rights for a repository or project" part of your question. In that case, the answer is no - only global admins can only see group memberships 

[Deleted user]

I think this should really be possible for administrators of projects and repositories. Otherwise it does not make sense to give them the possibility to change permissions and add groups.

[Balázs Szakmáry]

Unfortunately(?) only users with Admin level global permissions can see the members of groups directly.

A workaround: this plugin shows all the permissions for a repo (to anybody), and group memberships are visible. Of course, this can only be used to verify that adding a certain group added the right people after the change is already made.

[Deleted user]

Thanks, Balazs.