Are you sure adding DataInterfaceDispatcher here doesn't result in some security holes?  `get_possible_reports()` ultimately ends getting up shown in the list where you can choose what reports a user can see, but doesn't the stuff under DataInterfaceDispatcher fall under a separate permission?