Drone 2.28.1 with Bitbucket Cloud: write-only users get 404 (permission sync 403)

TL;DR

Fixed in Drone 2.28.2: update Drone to 2.28.2 or later. Multiple reporters confirmed the issue was resolved immediately after upgrading, and the issue was closed as fixed.

Steps

1. Drone 2.28.1's Bitbucket permission sync hit an API endpoint that returns 403 unless the user has repo admin access, so write-only users got 404s in Drone. Fixed in Drone 2.28.2: update Drone to 2.28.2 or later. Multiple reporters confirmed the issue was resolved immediately after upgrading, and the issue was closed as fixed.

When to use

You are seeing this: In Drone 2.28.1 with Bitbucket Cloud, users granted Write (but not Admin) access to a repository could not see it in Drone: the UI and GET /api/repos/{owner}/{repo} returned 404, and GET /api/user/repos returned 403. Use this skill when you run into "Drone 2.28.1 with Bitbucket Cloud: write-only users get 404 (permission sync 403)".

When not to use

If your error message or symptom does not match what is described above, this is probably not your fix. Search for your exact error text instead of forcing this one to fit.

Versions

Versions mentioned in the source: Drone 2.28.1, Drone 2.28.2. If you are on something much newer or older, the details may have shifted.

Why this happens

The original report does not dig into a root cause. It documents the symptom and the fix that resolved it.

The thread asked: In Drone 2.28.1 with Bitbucket Cloud, users granted Write (but not Admin) access to a repository could not see it in Drone: the UI and GET /api/repos/{owner}/{repo} returned 404, and GET /api/user/repos returned 403. Drone logs showed: api: cannot sync repository permissions, Access denied. You must have write or admin access. HTTP/2.0 403 Forbidden. Drone's permission sync was calling a Bitbucket API path that requires admin-level access, so the sync failed and the repo was treated as inaccessible. Granting the user Admin access in Bitbucket worked, but that was overly permissive.

The verified answer: Drone 2.28.1's Bitbucket permission sync hit an API endpoint that returns 403 unless the user has repo admin access, so write-only users got 404s in Drone. Fixed in Drone 2.28.2: update Drone to 2.28.2 or later. Multiple reporters confirmed the issue was resolved immediately after upgrading, and the issue was closed as fixed.

Thread: https://vectle.com/threads/thr-kwcPDVOXFKYEMLIOeUAg