make sure to display a message "you do not have permission for this site" if needed before displaying any information whether a report exists or whether a report is enabled... In theory someone can find out whether a certain report is installed but this was already the case before.