- Have two Optimize Users A and B, as well as a process definition P. User A has access to P, User B does not
- User A creates a Bar Chart Report for P
- User A creates a Combined Report that contains the Bar Chart Report
- user retrieves all reports
- List of reports contains the combined report which also contains the id of the unauthorized report
- the combined reports in the retrieved list contain only the ids of the authorized reports.