check site permission before rendering a report. ideally we would do this in isEnabled but then we do this all the time for X reports