Who Can View Or Publish Report Data?
Both full and limited admins can generate and view reports. However, only full admins can publish, update, or delete reports to the report dashboard.
Also, when a report renders data, it automatically filters data as per what the user is authorized to see. For example, if you have a hidden plan, and a user is not authorized to view this plan, reports will be rendered as if the plan did not exist (nor its associated calculations, credits, rewards, etc.).
If you publish a report scoped to a hidden plan / calculation to the dashboard, and a user is not authorized to view this plan, the entire report will not be shown at all on the dashboard.
In other terms, reports always ensure users can only see what they are supposed to.