Just as a plugin, Bonfire permission settings are related to the project roles and permission scheme in JIRA side. It use the the settings for Browse Projects and Create Issues rules .
Something like that can be done using mail handler features. This is because you can configure to use a default reporter and do not auto-add a user.
For further details, perhaps the following link could be useful:
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG