fix report list permission bug