Thanks Nitesh for the suggestion.
However, I'm not using the dashboard as the front page.
Also, if a non-administrator user attempts to access the address of a report (so independent of all instances of the block), they get a permissions error. So I don't believe the issue is on the page.