What is meta? ×
Meta Stack Exchange is where users like you discuss bugs, features, and support issues that affect the software powering all 134 Stack Exchange communities.

When I try to link my public CV to my Bitbucket account I get this message:

StackOverflow is requesting access to your data

StackOverflow is requesting read and write access to your public and private 
repositories. If you don't want to give StackOverflow access to your data, 
exit this page.

Is there a way to link the data, but keep private repositories private?

share|improve this question

1 Answer 1

up vote 19 down vote accepted

Hi Joe, we only do this to verify identity, and that the repositories are yours. We have no interest in writing to your repository, it's just that Bitbucket's API is all-or-nothing when it comes to authentication.

We will no longer display private repositories in the import list, thanks for the heads-up.

share|improve this answer
1  
Thanks for the quick response Matt. –  Joe May 12 '11 at 2:12
    
@M'vy they answered the question and the import list does show private repos, but at least it's only to select the private ones. –  Joe May 24 '11 at 21:53
4  
Matt, is this just a one time thing during the verification? You don't keep write access forever do you? –  Brian Neal Mar 27 '12 at 23:27
1  
Thanks, Matt -- I can't upvote this because, well, you know, but I would. Any chance this information can be added to the profile page itself, maybe in a tooltip or somesuch? It's just a little creepy to be prompted for r/w access to all repos, and a ready explanation would ease the mind of the newcomer. –  dgc Jul 16 '13 at 20:18
2  
Requesting more permissions than what is needed is unnecessary, potentially dangerous (just imagine someone gaining control over the relevant server) and makes concerned users suspicious about StackOverflow's intentions. As long as this behavior is present I won't be able to use this feature. I would really appreciate if you would talk to the BitBucket guys and request to change this. –  aef Sep 10 '13 at 13:14
    
Doesn't read permissions on private repos sound too much? Why should S.O. read the source? Or am I totally out of this scope and I owe a sorry? –  JimmyKane Feb 28 at 22:35
1  
@JimmyKane: It does sound too much - and it is. But Stack Exchange can't control this. That's the whole point of this answer. You don't owe anyone an apology - perhaps Bitbucket does instead. –  BoltClock's a Unicorn Mar 1 at 5:56
    
I don't understand why do you want to confirm my identity, but I would never give you write permission to my repos (nothing personal! it just looks too insecure). I know this is Bitbucket's fault, but from your side you could add a tag saying "unverified" for instance, or check for a special SE repo with your id number on it. –  pera Aug 29 at 16:35

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .