When I try to link my public CV to my Bitbucket account I get this message:

StackOverflow is requesting access to your data

StackOverflow is requesting read and write access to your public and private 
repositories. If you don't want to give StackOverflow access to your data, 
exit this page.

Is there a way to link the data, but keep private repositories private?

1 Answer 1


Hi Joe, we only do this to verify identity, and that the repositories are yours. We have no interest in writing to your repository, it's just that Bitbucket's API is all-or-nothing when it comes to authentication.

We will no longer display private repositories in the import list, thanks for the heads-up.

  • 1
    Thanks for the quick response Matt.
    – Joe
    May 12, 2011 at 2:12
  • @M'vy they answered the question and the import list does show private repos, but at least it's only to select the private ones.
    – Joe
    May 24, 2011 at 21:53
  • 4
    Matt, is this just a one time thing during the verification? You don't keep write access forever do you?
    – Brian Neal
    Mar 27, 2012 at 23:27
  • 1
    Thanks, Matt -- I can't upvote this because, well, you know, but I would. Any chance this information can be added to the profile page itself, maybe in a tooltip or somesuch? It's just a little creepy to be prompted for r/w access to all repos, and a ready explanation would ease the mind of the newcomer.
    – dgc
    Jul 16, 2013 at 20:18
  • 4
    Requesting more permissions than what is needed is unnecessary, potentially dangerous (just imagine someone gaining control over the relevant server) and makes concerned users suspicious about StackOverflow's intentions. As long as this behavior is present I won't be able to use this feature. I would really appreciate if you would talk to the BitBucket guys and request to change this.
    – aef
    Sep 10, 2013 at 13:14
  • Doesn't read permissions on private repos sound too much? Why should S.O. read the source? Or am I totally out of this scope and I owe a sorry?
    – JimmyKane
    Feb 28, 2014 at 22:35
  • 1
    @JimmyKane: It does sound too much - and it is. But Stack Exchange can't control this. That's the whole point of this answer. You don't owe anyone an apology - perhaps Bitbucket does instead. Mar 1, 2014 at 5:56
  • 1
    I don't understand why do you want to confirm my identity, but I would never give you write permission to my repos (nothing personal! it just looks too insecure). I know this is Bitbucket's fault, but from your side you could add a tag saying "unverified" for instance, or check for a special SE repo with your id number on it.
    – pera
    Aug 29, 2014 at 16:35

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .