[OEM-173] fixed report controller to work with new permissions system
Merge branch 'jira/OEM-173'
[OEM-173] Use roles for report auth