groups rest api 2.0 endpoint

[ciganma1]

 Is in the version 2.0  rest api an equivalent endpoint  for group management /groups ? 

[Danyal Iqbal · Accepted solution]

No, you need to write a plugin to manage user groups now. v1 was eccentric :)

[IT Administrator]

So rather than providing an API like every other system I've come across, each user has to write their own plugin ... and v1 was eccentric?

[Danyal Iqbal]

Not really, you need to write 1 plugin to expose a Rest endpoint to do whatever you want and yes, I know there is a special place in hell for me but I am happy that this endpoint was scraped.

It was a glaring security loophole :) I guess the gape was only visible to atlassian when it threatened their own cloud offerings.

[richglazier]

@Danyal Iqbal, can you point me in the right direction on how to write my own API end point plug in, so I can programmatically create bitBucket users?

Thanks

[Danyal Iqbal]

Hi @richglazier,this short tutorial should get you started:

https://developer.atlassian.com/server/framework/atlassian-sdk/developing-a-rest-service-plugin/

Some basics to top up:

https://developer.atlassian.com/server/framework/atlassian-sdk/rest-plugin-module/

[IT Administrator]

So I understand you saying that we need to write our own API to expose a REST endpoint.

My next question would be what that app is supposed to do for managing users. Is there some sort of internal API that in all my searching I haven't come across? Or should we be connecting directly to the database and figuring out which tables and links we should be changing? I haven't seen any documentation on that either.

[richglazier]

^^ what he said

[Danyal Iqbal]

ComponentAccessor.getUserUtil()

is a good starting point for the internals of usermanagement.

PLease stay away from the db. Nothing good will come out of it.

[richglazier]

Thanks for the replies, you two. Very appreciated.

[IT Administrator]

Oh, did I forget to put <joke> tags around the DB access comment?

The only reference I can see for ComponentAccessor.getUserUtil() is in reference to Jira, not Bitbucket.

I guess my bigger question is, where are we supposed to find the documentation on these functions? It all seems like pulling teeth, just a little info at a time - and only help from (presumably) volunteer community helpers - nothing from the people we pay the money to.

All this effort seems way beyond what someone just wanting to use an API would do. I wonder what other admins do? Switch to a competing tool that has an API?

[Danyal Iqbal]

:D

+1 for an enlightening comment.

+1 for support request.

What a pleasent change of pace. You should create a support request and get an official response from the people who take your money. I am sure they can offer a nice paid plugin for the job:) but seriously, have you thought about other workarounds, like managing users in a separate user directory?

Just for the record, I completely agree with you.  As a system admin I need better documentation and not just better documentation, I need a better interface like GraphQL to interact with the application without pulling all my hair out:) Rest API's will  die out  before Atlassian.

[richglazier]

Can anyone from Atlassian comment on the BB Cloud API add user/group functionality?

[richglazier]

Thanks for the feedback Danyal and IT Admin. Your link, IT Admin, says in 2.0 you can no longer modify an existing BB user... but what about creating new accounts? Have you done that with API 2.0?

Thanks

[IT Administrator]

No, there is limited read-only user information only.

[richglazier]

boo :(

[IT Administrator]

Not according to this page

https://developer.atlassian.com/cloud/bitbucket/deprecation-notice-v1-apis/#groups

But I'm very keen to figure out what to do now.