This is entirely dependent on the policies of your company. The addition of read-only objects, such as reports, will not affect data integrity, but the decision to allow changes of any sort to the application is between the developer and whoever has authority for approving such actions within your company.