updated access rights for reports.php