So that extensions providing lower level admin permissions don't display the reports tab if the user does not have access.  You have to set the cancan permissions on an object.