Add missing setup authorization check.
If you don't update, block access to /reportrts setup.