Locked down reports controller for non-admins
[Fixes #55583792]
Fixed up reporting.
[Fixes #55884692]