Since the report templates are project-specific and not folder-specific, permissions for reports can only be assigned for the entire project and not for specific folders. This means that a user who has a limited role on the project without permissions to execute reports (such as "Project Assignment") and then a role with permissions to execute reports in certain folders, will still not be able to execute reports in these folders. To avoid this, you must add the report execution permission to the role assigned for the project. The generated reports will still only contain the items from the folders to which the user has reading permissions. If this should only be possible for certain users, a new role can also be created (e.g. "Project Assignment with Reports") and this role can be given all rights of the original project role plus the right for report execution.
