Access to VIEW data is managed separately from Jira security schemes
Charts & Reports for Jira Service Management App does not use the same user permission schema as Jira.
All users that have access to the Apps VIEW generally can access all imported information in that VIEW, regardless of whether they have access to these data in Jira or not.