-
Bug
-
Resolution: Unresolved
-
Low
-
None
-
9.4.3
-
None
-
3
-
Severity 3 - Minor
-
29
-
Issue Summary
When websudo is enabled, a user with the project administrator role can't access the project links feature (Project settings > Project links), although it is visible through the project settings sidebar.
In this scenario, only a Bitbucket administrator will be able to access it.
Steps to Reproduce
- Install a Bitbucket version where Websudo is enabled. (This test was performed on v9.4.3)
- Log in to Bitbucket as a user who has "Project administrator" permissions for a specific project. This user should NOT have Bitbucket administrator or System administrator permissions.
- Navigate to Project settings > Project links for the project where the user has Project admin rights.
Expected Results
The user with Project administrator permission is able to view/add Project links.
Actual Results
The user is prompted to enter a password for a secure admin session and cannot proceed due to the below error after entering the correct password
Workaround
Disabling websudo gives the ability for a project administrator to access the Project links feature.