Read Only Permission on MetaData

I am trying to create a "Read Only" group that will only have the ability to run reports that already exist in the User Console. The end goal is that they would be able to execute reports created and saved using metadata objects but can not create new reports using the Metadata.


I created a new group in the Admin Console. In the Pentaho Metadata editor, I used that group and gave it "Execute" permission on the business view objects. I did not give it "create, update, or delete" permission. In the Pentaho User Console, I've given the group "Execute" permission to the folder that contains the metadata saved report. And I've given the group "Execute" permission on the specific report. However, when I login using that user, they can still create new reports using metadata. If I remove the "Execute" permission from the Metadata business object, they can't see the metadata at all to create new reports but they also can't execute saved reports. Is what I'm attempting possible? If so, how do I do it?


Thanks!