Advisory Weakness Curation

Silverstripe Reports are still accessible even when `canView()` returns false Reports can be accessed by their direct URL by any user who has access to view the reports admin section, even if the `canView()` method for that report returns `false`. ## References - https://www.silverstripe.org/download/security-releases/cve-2024-29885

Silverstripe Reports are still accessible even when `canView()` returns false Reports can be accessed by their direct URL by any user who has access to view the reports admin section, even if the `canView()` method for that report returns `false`.