integrate hierarchical user filter with reports
move group/user hierarchy stuff into separate file