fix permissions for viewing reports