How to secure access to a Forena data block?
Quote from the documentation that comes with Forena, about Data Block Security:

Data Blocks Security is a technique used to secure a selected data block. It is an additional (but optional) security layer on top of the Drupal permission &quot;access repository name data&quot; right (whereas &quot;repository name&quot; is the name of the data block's repository). Using this technique it is possible to enforce additional Drupal permissions such as:

access content
access administration pages
administer content
administer users
administer permissions
... (the (Drupal permissions) sky is the limit)

Data Blocks Security is actually implemented by means of a comment containing ACCESS=some_permission. It is added near the top of a data block which indicates the Drupal permission required to access the data retrieved by the data block. Its format depends on the format of the Data Block (which can be either in SQL format or in XML format), as further detailed below.

From the scenario in the question here, it appears to me that there is no need for adding such comment with ACCESS=some_permission, instead it should be sufficient to only use the access repository name data for those &quot;couple of roles&quot; that should have access to the data in the report.
Note the data in the report I wrote here: it is well possible that users who do not have the required permission for the data blocks, do have access to such &quot;reports&quot; anyhow. However: those reports, by design, do not show any data of the data blocks they do not have access to.
Nevertheless, I wonder if there is anything (like a bug?) that may be related to the &quot;my_db&quot; part of your issue. Therefor I'd recommend to also experiment with (eg) the &quot;Drupal&quot; reports: only grant access to these reports to &quot;Admin&quot; role, and then run a similar testcase. How do your results look like in that scenario? As a variation, can you (temporarily) rename &quot;my_db&quot; to &quot;mydb&quot;, to check what results you then get?