Currently, all JIRA OnDemand instances created before May 24th 2014 have an auto-invite feature send out to those in the 'Developers' group. This would essentially give people access that shouldn't have access to code on Bitbucket. While this is turned off with instances created after the above date, we have no way of warning older customers that they should configure their instance:

https://confluence.atlassian.com/display/BITBUCKET/Configure+Automatic+Team+Invites

A small improvement would be something such as a banner/link to this setting, warning anyone who has this feature enabled to configure their automatic invites. This feature is currently costing a lot of Bitbucket support time in log searching for administrators who are not aware that people are getting automatically invited.