Users should have ability to restrict the reports section to specific users/groups.

For some JIRA instances that have external access to customers, you don't want to customers to be able to run reports