separate access control for payment reports, RT#77007