No point checking permissions for incident reports, as they're available to everyone that can see this report