Reports 403 Forbidden unless Superuser.

[Parthian]

Title says it all.
I can see Reports when a low ranking View only user. But a click on a report results in a 403.
Tried all sorts of combinations of Permissions Group/User. Only thing that works is when User is made Super.

UPDATE.
I restarted django and now my low rank user can see the Report.
But the problem is now the opposite. The reports are viewable even when logged out.
I've got all the permissions off for things like.
Authentication and Authorization, Reversion and Reporting. All off for both User and Group.

So anyone can see the Report if they know the url. Looking at the admin route I can see I'm the Anonymous User. With no models listed but Reports are and can be viewed. Possibly a Django configuration thing rather than ERP.