fixed reports list restrictions, added implicit user hierarchy through error messages
when an admin accesses a user account its not suppossed too, appreopreiate
message is displayed and changes to edit form not propagated to DB