User Directory privacy

Question

Hi

I'm using bitbucket for our organization and I would like that not all the developers (they are grouped inside user groups called 'project XXX devs') be able to see the whole User Directory list.

I prefer them not being able to see the name of all the customers and external collaborators that work on the projects they are not working at.

I haven't found a privacy permission that allows me to achieve this.

Thanks!

Theodora Boudale · Answer

Hi @Agus,

I'm afraid that the visibility of the People page cannot be restricted, any user with workspace access will be able to view this page.

We have a feature request for the ability to restrict access to that page:

* https://jira.atlassian.com/browse/BCLOUD-22755

You can add your vote to that feature request (by selecting the Vote for this issue link) as the number of votes helps the product managers better understand the demand for features. You are more than welcome to leave feedback, and you can also add yourself as a watcher (by selecting the Start watching this issue link) if you'd like to get notified via email on updates.

Implementation of features is done as per our policy here and any updates will be posted in the feature request.

Kind regards,
Theodora

Agus_sxpmys · Answer

Hi @Theodora Boudale !

Thanks for your answer! Actually my concern is not only the User directory but also the 'People' tab where any user with restricted access only to one repository/project will be able to see the whole user base of the workspace.

I tried with your suggestion of verifying that the 'Can administer all workspace and repository settings' is off for an example user, but the 'People' tab with the whole workspace user list is still visible. Is there any way to avoid this?

Theodora Boudale · Answer

Hi @Agus and welcome to the community!

The User directory in a Bitbucket Cloud workspace is available via Workspace settings. Only users who have been granted administrator access to a workspace can access Workspace settings (and the User directory page).

There is no permission that controls the privacy of User directory among administrators. If this user group has admin access to your workspace, you will need to change that so that the developers can't see the Workspace settings option. You can do this if you go to the User groups page of this workspace (from Workspace settings) > select a certain user group > select Edit > uncheck the option Can administer all workspace and repository settings.

Please feel free to reach out if you have any questions.

Kind regards,
Theodora