You don't have permission to access file on this server

Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.

Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.

*Except Fisheye and Crucible

Symptoms

In Bitbucket Server (up to version 4.x), when trying to browse the UI to view files under certain directories (i.e. WEB-INF), an error is shown:

1 2 Forbidden You don't have permission to access /projects/CIET/repos/event-app/browse/webapp/src/main/webapp/WEB-INF/web.xml on this server.

Cause

A configuration in your reverse proxy is blocking the access to certain URLs. If you are using Apache, look out for configurations in httpd.conf like:

1 2 3 4 <Proxy */projects/CIET/repos/event-app/browse/webapp/src/main/webapp/WEB-INF> Order Deny,Allow Deny from all </Proxy>

or

1 2 3 4 5 6 7 <LocationMatch "/WEB-INF/"> deny from all </LocationMatch> <LocationMatch "/META-INF/"> deny from all </LocationMatch>

Resolution

Configure your reverse proxy to allow requests to those URLs.

Updated on April 8, 2025

Still need help?

The Atlassian Community is here for you.