Users with limited to no role permissions can still access the forecasting report and see cost data:
There is currently no user role permission to block access to the forecasting report. This will be added in the near future and announced publicly before deploy.