other user able to push code on private repository who hasn't access?

Question

i have created private repository with "devloper" access to other user.

i am using GitHub Desktop with GitHub account login in win 10,

i had clone repository wiith dev acc , at the time to push commit to repository i used git desktop which has login using "GitHub" user id not Bitbucket.

Even then able to succefully push changes.

At Bit Bucket Dashboard

Unmapped user This user cannot be matched to an Atlassian account.

Roger_Esteban · Answer

Hi @Ana Retamal, there's something that I don't understand and hope you can clarify.

When a repository is private, members must be authenticated to commit. Considering that, why are the Full Name and Email of the author not extracted from the underlying auth token that was used to commit?

In case a repository is private, Bitbucket should always infer the commit owner based on the auth data.

In case the repository is public, obviously it's ok to rely on the computer name and/or whatever full name and email configured on the author's computer.

I think this should be fixed, as commits made on private repositories being shown as if they had been made by unknown users, doesn't make any sense and makes you believe that your admin account got hacked and someone was able to mess with your code.

Thanks!

Ana Retamal · Answer

Hi Vijay, welcome to the Community!

That happened because the email alias used to commit that code didn't map to your DVCS email address, so Bitbucket could not associate the account with the commit and it resulted on Bitbucket showing you that message.

To fix that you can follow the steps at Configure your DVCS username for commits. For more information about this topic, you can also read Set email aliases.

Let us know if you need any further assistance.

Best regards,

Ana