A user with advanced report application access rights can perform actions for which they are not authorized