client side report access permit