Make sure ordinary users cannot see other users' reports