Subject: Restrict normal user to view or download reports.

Description:

- Can't think a better way than using:

  @permission_required('User.objects.create_user')

  (Admin has a permission to create new user.)