Add permission checks to prepared_report & query_report

Hardens report access by adding permission validation to prevent unauthorized access.