Fix Direct access to reports

If a report is not configured in the admin-->configure settings, there is
a possibility that the user may directly enter the url to get to that report.
Prevent that by checking if the user has access to report, else throw 404