This tool sends reports outside Qlik's own Section Access data authorization. Anyone who can sign in can generate and email reports for any app made visible here, regardless of their personal Qlik data permissions — the same way Qlik's own reporting/admin tooling works. This is a deliberate design choice.