User Report Permissions
Why do users that have access to the Reports tab see all reports?
The way report permissions work, is that the users will be able to see all of the reports, however, they will only return data for projects they are a member of. There is a caveat to this, however, and that is if they have the enterprise role permission to "Run reports on all Projects", they will be able to return data for all projects whether they are a member or not. The only way to make it so they can only see certain reports is to set permissions on each report individually.