When a new Repository is created in Bamboo the default behavior is for it to be usable by all logged in users as shown in the screen shot.

There should be a way to specify which groups may use the repository and have it be inaccessible to users not in those groups.