Viewing members of project without any bitbucket account.....

Issue #15049 closed
jean-françois.lamourelle
created an issue

Hello all,

Everyone could access to the page of members of our project without any account or rights on it. We try to do it on our side and I confirm we can do the same on several others projects, unknown of us...... If Sam Gabal is reading it, I can access his page ; the same for Benjamin Ghenne, Jérémy Huet, Lucie Harive, .... and many others -> A kind of security flaw, don't U think so ?

...don't know who declare as assignee....

Comments (6)

  1. Alastair Wilkes staff

    Hi Jean-François,

    Thanks for your question. If you mark your team's profile as "private" (in team settings look for "private profile"), the list of members will not be visible.

    Thanks!
    Alastair

  2. Log in to comment