new report: todo list, added create permission to administrator for Report