Checking Admin Permissions for Triggering Custom Pipelines via API

Vish_rb4y9m

 Hello,

I'm setting up a custom pipeline in Bitbucket and need to verify whether the user who triggers the pipeline has admin permissions. I attempted to check permissions with an API call to:

GET https://api.bitbucket.org/2.0/repositories/<span>$BITBUCKET_REPO_OWNER</span>/<span>$BITBUCKET_REPO_SLUG</span>/permissions-config/users/<span>$BITBUCKET_STEP_TRIGGERER_UUID</span>

However, this returns no data since users have been added to the repository as part of a group, not individually. How can I check if the pipeline triggerer is an admin, especially when permissions are assigned via groups?

I need to resolve this promptly to proceed with pipeline configuration. Any assistance would be greatly appreciated.

Thanks!

Theodora Boudale

Hi @Vish!

If permissions are assigned only via groups, you can first use the following API endpoint to list group permissions for this repo:

• https://developer.atlassian.com/cloud/bitbucket/rest/api-group-repositories/#api-repositories-workspace-repo-slug-permissions-config-groups-get

The field you need to look at in the output for each group is the permission (and not the default_permission, as the latter may be different than the actual permission). This way you can filter which groups have admin permissions to this repo.

Afterwards, you can use the following API endpoint from version 1 of our API to get group members for each group that has admin permission to the repo:

• https://support.atlassian.com/bitbucket-cloud/docs/groups-endpoint/#GET-the-group-members

You will then have a list of users with admin permission to the repo. You can then check if the UUID of the user that triggered the pipeline belongs in that list.

Kind regards,
Theodora