Re: Security Question

you can deny the capability to that role.

There is a run report option in properties > advanced > run with owner capabilities.

If the owner of the report has a role with capabilities for nativeSQL, any user with permissions on the report should be able...