nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Can a person with Read only access to private repository copy and download the repository?

Vesh g

I want to give someone access to my private repository to just review the code and see it but not copy/download the code.

What access level should I grant?

Can read only access prevent downloading/copying repository?

Accepted answers

Jeremy M

Dear Vesh,

The following permission levels and its consequences exist within Bitbucket repositories;

Screenshot from 2017-08-07 09-03-07.png

So, regarding to your question.. yes, people can clone/fork/pull the repository to their local system.

Here a link to the documentation.

Friendly Regards,

Jeremy Mooiman

All comments

Jeremy M

Dear Vesh,

The following permission levels and its consequences exist within Bitbucket repositories;

Screenshot from 2017-08-07 09-03-07.png

So, regarding to your question.. yes, people can clone/fork/pull the repository to their local system.

Here a link to the documentation.

Friendly Regards,

Jeremy Mooiman

Vesh g

And does cloning/forking means actual download of the repository to the user's computer/laptop or taking the code away from bitbucket?

Vesh g

What type of access do I grant for person to jest review the code but not download it to their system?

Jeremy M

Dear Vesh,

Yes, a user will be able to ''clone'' the repository and thus download a repository to his/her local machine and read the files.

Cloning a repository fork or branch

When you want to work on a project by updating its files or adding new files, you need to make a local clone of the remote Bitbucket repository onto your machine or local network. You do this using the Clone button from the Bitbucket repository. If you forked a repository, you simply clone the fork. If you branched a repository, you clone the repository and checkout the branch.

Friendly Regards,

Jeremy Mooiman

Franky Aguilar

That privilege is for those who have a premium account, I found this...

https://confluence.atlassian.com/bitbucket/control-access-to-your-private-content-862621261.html

Requiring two-step verification

You can require that the users with access to private content are only able to see the content if they've enabled two-step verification. If they haven't enabled two-step verification, users with access will see a message that prompts them to enable it. In addition to being unable to see this content, users won't be able to clone, push, or pull a private repository either.

Douglas McCabe

I believe 2-step verification does not help achieve the result I (and others above) are looking to achieve. We want a user to be able to view the code, but not to clone / copy / duplicate / print it. Password-protected Adobe Acrobat files, and some websites, provide exactly this capability.

Philippe Chaudun

I agree, we are already using 2 steps authentication, that doesn't fix the issue, that just allows to protect access to you BitBucket Cloud not to manage permission for people that have access.

Ritesh Prajapati

Hello Team,

Does anyone get solution to give access of view code but to prevent clone or download code? We have also same requirements for the same.

We have already tried few other tools but didn't get any success it yet as per requirements.

Let me know if anyone has do it into free or premium account which will be helpful for us.

Regards,

Ritesh Prajapati

Sekhar Nadella

I agree, it doesn't help much. We need capability to control copy/clone under read-only access to prevent insiders code exfiltration.