+ can_view reports permission