UCLA reports: Refactored code, splitted reports, added WebUser role perm...

...issions accessing to UCLA reports.
Just looking at this and wondering if it isn't possible to use `UserRole.by_domain_and_name(...).ids_of_assigned_users`