Business Reporter client allows access to all reports

I have noticed, when trying solve a users acccess issue for a BR report, that while in IFS Explorer, users can only see and run BR reports that their IFS access allows them to.
However, if someone logs in with  the standalone Business Reporter client on their PC, they can access and run all the BR reports in the system, regardless of their IFS user security settings, so the security settings are bypassed altogether.
Is this a bug, or is there something that needs configuring in the system to ensure they can only see and run  the same reports in the BR client that they have access to in the IFS Explorer client?
IFS Explorer client version: apps 10 update 14, in house installation.

Business Reporter client: Apps 10, version 5.0.24

Thanks