Control Freak should allow exemptions for access keys

[Mark Flickinger]

Control Freak allows configuring exemptions for users and groups, but not access keys. It would be nice if we could also configure exemptions for access keys in a project, similar to how Branch permissions in Bitbucket Server work.

[Julius Davies [bit-booster.com]]

Yes, this is a good idea. We’ll do this.

[Rafael Fernandez]

FYI, I am getting the following when a service account using access keys pushes.

remote: Control Freak: java.lang.NullPointerException
remote: java.lang.NullPointerException
remote:   at com.bitbooster.hook.ControlFreakHook.userExists(ControlFreakHook.java:2504)
remote:   at com.bitbooster.hook.ControlFreakHook.authorCheck(ControlFreakHook.java:2371)

‌

[Paul Wagland]

This is equivalent to issue #108.

[Julius Davies [bit-booster.com]]

Implemented in version v2020.01.29.

Note: Data Center version is published. Server version held up in marketplace approval queue for now (!?!?) but can be downloaded directly from:

https://marketplace-cdn.atlassian.com/files/artifact/b5e9dbee-1531-43fb-abc6-44bc805648a2/control-freak-2020.01.29.jar

[Roy Mammen]

I am currently running Bitbucket (Data Center) Commercial Term License and using Control Freak for Bitbucket Server plugin version 2019.10.20. However, I am not able to see any latest version from the market place. In fact when I go to “Manage Apps” from Bitbucket Data Center, where I have v2019.10.20 of plugin installed, I do not even see an “Update Available” button. Usually, I would expect “update available” button for me to upgrade the plugin to the latest version.

In addition, after manually upgrading the plugin (by uploading above published jar file ‘control-freak-2020.01.29.jar’ from Manage App and also after restarting the service), I am still not seeing an option to exempt access keys. The configuration screen is pretty much similar to the older version of add-on, allowing only exempt users and Groups, at global/project/repo level.

Let us know what we are missing.

Thanks

[Julius Davies [bit-booster.com]]

v2020.05.05 (just published) now allows admins to exempt all access keys from the Control-Freak rules.