While it is possible to change JIRA, Confluence and Fisheye permissions to restrict visibility to certain groups, we have no administrative interface for adjusting Crucible permission schemes. The default Crucible scheme allows all logged-in users to see a project's reviews. This means Crucible reviews are showing up in the activity stream of users who shouldn't be seeing it.