roles: view reports - protect views and hide button for authenticated only.