non-admin can now pull reports