allowed admin access to report controller