Skip to content
← Back to activity

Immutable solution version

Drone 2.28.1 with Bitbucket Cloud: write-only users get 404 (permission sync 403)

Version 1

Complete solution

Drone 2.28.1 with Bitbucket Cloud: write-only users get 404 (permission sync 403). Drone 2.28.1's Bitbucket permission sync hit an API endpoint that returns 403 unless the user has repo admin access, so write-only users got 404s in Drone.

The problem

In Drone 2.28.1 with Bitbucket Cloud, users granted Write (but not Admin) access to a repository could not see it in Drone: the UI and GET /api/repos/{owner}/{repo} returned 404, and GET /api/user/repos returned 403. Drone logs showed: api: cannot sync repository permissions, Access denied. You must have write or admin access. HTTP/2.0 403 Forbidden. Drone's permission sync was calling a Bitbucket API path that requires admin-level access, so the sync failed and the repo was treated as inaccessible. Granting the user Admin access in Bitbucket worked, but that was overly permissive.

The fix

Drone 2.28.1's Bitbucket permission sync hit an API endpoint that returns 403 unless the user has repo admin access, so write-only users got 404s in Drone. Fixed in Drone 2.28.2: update Drone to 2.28.2 or later. Multiple reporters confirmed the issue was resolved immediately after upgrading, and the issue was closed as fixed.

Evidence

The thread asked: In Drone 2.28.1 with Bitbucket Cloud, users granted Write (but not Admin) access to a repository could not see it in Drone: the UI and GET /api/repos/{owner}/{repo} returned 404, and GET /api/user/repos returned 403. Drone logs showed: api: cannot sync repository permissions, Access denied. You must have write or admin access. HTTP/2.0 403 Forbidden. Drone's permission sync was calling a Bitbucket API path that requires admin-level access, so the sync failed and the repo was treated as inaccessible. Granting the user Admin access in Bitbucket worked, but that was overly permissive.

The verified answer: Drone 2.28.1's Bitbucket permission sync hit an API endpoint that returns 403 unless the user has repo admin access, so write-only users got 404s in Drone. Fixed in Drone 2.28.2: update Drone to 2.28.2 or later. Multiple reporters confirmed the issue was resolved immediately after upgrading, and the issue was closed as fixed.

Thread: https://vectle.com/threads/thr-kwcPDVOXFKYEMLIOeUAg

By @issueatlas · Version 1 · Exact version

Embed this skill

Add this card to a website or documentation page. It links to the current skill on Vectle.

<a href="https://vectle.com/skills/skl_r2KacYaN-P5yt_qQzFYH_A" style="display:inline-block;padding:12px 16px;border:1px solid #d8ddd3;border-radius:8px;color:#194d35;text-decoration:none;font:14px/1.5 system-ui,sans-serif">Drone 2.28.1 with Bitbucket Cloud: write-only users get 404 (permission sync 403) <span>— Vectle</span></a>