nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Why are my branch permissions not working

Ron van der Kruit

I do all my builds from a pipeline.

When I allow one user (develop) write permissions on develop, bitbucket refuses to build, because the pipeline wants to make changes and commit these changes.

I need to give write permissions to all in order to have my pipeline work.

I tried to give one user write permissions and that also doesn't work. Not fram my pipeline nor from sourcetree.

Please help

Accepted answers

Theodora Boudale

Hi Ron and welcome to the community!

Based on your description, I assume that your Pipelines build tries to push back to the repo, is that correct?

If you have branch restrictions in place, then the push from pipelines will fail unless you configure authentication details for the push. The reason for that is that the push from Pipelines is done with a bitbucket-pipelines user, that cannot be added the branch restrictions:

https://jira.atlassian.com/browse/BCLOUD-19136

The way to work around this until the feature I shared above is implemented, is to configure the push in Pipelines to always use the authentication details of a user you have added to the branch restrictions.

Possible ways to do that are explained in the following documentation, specifically in the sections SSH Key pair managed by Bitbucket Pipelines, SSH Key pair managed with variables, App secret:

https://support.atlassian.com/bitbucket-cloud/docs/push-back-to-your-repository/

The three sections I mentioned are three different ways of configuring authentication for pushing from Pipelines.

Please be mindful that the username and app password of a user can be used to retrieve all repos a user has access to and SSH keys grant access to other repos this user has access to. You could use a separate user (that would serve the purpose of a bot account) that has limited access.

You also mentioned an issue with SourceTree. I'm not sure if that's related to the Pipelines issue, as SourceTree pushes based on the authentication you have configured in the application and not with the bitbucket-pipelines user that Pipelines uses. Does the push issue from SourceTree occur with a user who has been granted write access to a branch via branch restrictions? If so, what error does the user see?

Kind regards,
Theodora

All comments

Theodora Boudale

Hi Ron and welcome to the community!

Based on your description, I assume that your Pipelines build tries to push back to the repo, is that correct?

https://jira.atlassian.com/browse/BCLOUD-19136

https://support.atlassian.com/bitbucket-cloud/docs/push-back-to-your-repository/

The three sections I mentioned are three different ways of configuring authentication for pushing from Pipelines.

Kind regards,
Theodora

Ron van der Kruit

Hi Theodora,

Thank you for your reply.

The fact that the pipeline is triggered from the pipeline does not make a difference. The whole pipeline is executed as the develop user.

It also does not work when I try to push from my IDE or SourceTree as my own user. Not using pipelines at all.

When I set the restrictions like this:

I still get the following error:

<screenshot_redacted>

Again, without using pipelines.

The branch restritions are set on the project by the way

Theodora Boudale

Hi Ron,

For Pipelines, it doesn't matter which user triggers the pipeline. This is irrelevant when you do a git push from Pipelines to a branch with branch restrictions. If you want your Pipelines build to do a git push to a branch with branch restrictions, you'll need to configure authentication for this push, with a user that is added to the branch restrictions.

Additional info on how to make this configuration is on the page I shared in my previous reply:

Possible ways to do that are explained in the following documentation, specifically in the sections SSH Key pair managed by Bitbucket Pipelines, SSH Key pair managed with variables, App secret:

https://support.atlassian.com/bitbucket-cloud/docs/push-back-to-your-repository/

The three sections I mentioned are three different ways of configuring authentication for pushing from Pipelines.

Please be mindful that the username and app password of a user can be used to retrieve all repos a user has access to and SSH keys grant access to other repos this user has access to. You could use a separate user (that would serve the purpose of a bot account) that has limited access.

If you have any questions about the info on this documentation, please feel free to let me know.

With regards to SourceTree, the message typically occurs when branch restrictions are in place. I suggest checking the user authentication you have configured in SourceTree.

Based on the screenshot, I assume you are using SourceTree for Mac. First, open the repo in SourceTree, select the button Settings (top right corner) > select the tab Remotes and in there, check if the remote repo URL is an SSH or an HTTPS one.

Then, in the main SourceTree window (where the list of your repos is displayed), select the arrow next to the three dot circle > select Accounts. Edit the details of the account added there, and confirm (a) that the protocol matches with the protocol on the remote URL of your repo and (b) that the authentication details in there are for your Bitbucket user. If you use the SSH protocol, please ensure that the public SSH key that SourceTree is using, is added to your Bitbucket account here: https://bitbucket.org/account/settings/ssh-keys/.

Just a heads up, I removed the screenshot from your post to protect your privacy, as it was showing your repo details.

Kind regards,
Theodora

Ron van der Kruit

Hi Theodora,

I still can't get it to work :-(...

Followed the instructions. Created a ssh key in my repository and added that to the personal bitbucket settings of the development account. But the ssh key is not used by the pipeline .

What am I missing?
Many thanks for you help

Ron

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

cloud

bitbucket

bitbucket-cloud