Prevent direct access to admin pages.
Only perform db query with valid report id.