43

When I try to link my public CV to my Bitbucket account I get this message:

StackOverflow is requesting access to your data

StackOverflow is requesting read and write access to your public and private 
repositories. If you don't want to give StackOverflow access to your data, 
exit this page.

Is there a way to link the data, but keep private repositories private?

Improve this question

1 Answer 1

Reset to default
21

Hi Joe, we only do this to verify identity, and that the repositories are yours. We have no interest in writing to your repository, it's just that Bitbucket's API is all-or-nothing when it comes to authentication.

We will no longer display private repositories in the import list, thanks for the heads-up.

Improve this answer
8
  • 1
    Thanks for the quick response Matt.
    – Joe
    Commented May 12, 2011 at 2:12
  • @M'vy they answered the question and the import list does show private repos, but at least it's only to select the private ones.
    – Joe
    Commented May 24, 2011 at 21:53
  • 4
    Matt, is this just a one time thing during the verification? You don't keep write access forever do you?
    – Brian Neal
    Commented Mar 27, 2012 at 23:27
  • 1
    Thanks, Matt -- I can't upvote this because, well, you know, but I would. Any chance this information can be added to the profile page itself, maybe in a tooltip or somesuch? It's just a little creepy to be prompted for r/w access to all repos, and a ready explanation would ease the mind of the newcomer.
    – dgc
    Commented Jul 16, 2013 at 20:18
  • 4
    Requesting more permissions than what is needed is unnecessary, potentially dangerous (just imagine someone gaining control over the relevant server) and makes concerned users suspicious about StackOverflow's intentions. As long as this behavior is present I won't be able to use this feature. I would really appreciate if you would talk to the BitBucket guys and request to change this.
    – aef
    Commented Sep 10, 2013 at 13:14
  • Doesn't read permissions on private repos sound too much? Why should S.O. read the source? Or am I totally out of this scope and I owe a sorry?
    – JimmyKane
    Commented Feb 28, 2014 at 22:35
  • 1
    @JimmyKane: It does sound too much - and it is. But Stack Exchange can't control this. That's the whole point of this answer. You don't owe anyone an apology - perhaps Bitbucket does instead.
    – BoltClock's a Unicorn Mod
    Commented Mar 1, 2014 at 5:56
  • 1
    I don't understand why do you want to confirm my identity, but I would never give you write permission to my repos (nothing personal! it just looks too insecure). I know this is Bitbucket's fault, but from your side you could add a tag saying "unverified" for instance, or check for a special SE repo with your id number on it.
    – pera
    Commented Aug 29, 2014 at 16:35

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .