Code coverage reports should not be accessible when a user does not have "workspace" permission. Currently, the user may not have the permission but can still access the workspace via links in the code coverage report.