Celoxis provides a multi level security on Reports. You can control
Who creates reports:
This is controlled in the form of a Create Report privilege. You can choose which role is granted this privilege
Who accesses reports:
When a report is created, there is a Share With Users option. You can either create a private report (not shared with anyone), or choose to share it with all users in a Specific Department, or share it with all users in your organization.
What data is visible on the reports
Finally, when the report displays data, the information has its own security layer. For e.g. if a user does not have View Financials privilege, and such a user accesses a report which contains financial information, then that user will see '*' in those columns.