As an administrator I want to prevent project administrators from being able to grant certain permissions

Problem Definition

Currently in Bitbucket Server a project administrator can grant any permissions to users, including write access to public users. This is not id ideal it opens the risk of (perhaps inadvertently) allowing users more access than company policy would allow.

Suggested Solution

An administrator should have a way of determining whether public permissions can be granted on repositories or not. There should also be a way of removing the permission from any repositories it has been granted on before (to being all repositories into compliance).

Workaround

None known