It would be a good idea to be able to restrict reporting capability for other users that won't open up the entire database. Eg: Calendar reporting for practitioner should only show the client they have access to not the entire client database (even the other practitioners' clients).