Class-based reports and Direct SQL expression configuration keys are available to solve the security issue if class-based reports and/or direct SQL expressions are not allowed by company policy.
To access them, navigate to System administration > Setup > License configuration.
The class-based reports configuration key enables the creation of class/OData reports.
The Direct SQL expression configuration key enables the use of Direct SQL within the Query Wizard.
The following is an example of custom/direct SQL:
SELECT SUM (SalesLine.SalesQty*InventTable.NetWeight) from SalesLine join InventTable on InventTable.ItemId=SalesLine.ItemId AND InventTable.dataAreaId = SalesTable.dataAreaId where SalesLine.SalesId=SalesTable.SalesId AND SalesLine.dataAreaid=salesTable.dataAreaid