...
As a JSM administrator, you can restrict access to Worklog Report on JSM customer portal from Restrict requests tab in project configuration of Worklog Report.
By default Worklog Report shows logged time about all requests in the project. The list of requests can be restricted to respect JSM user permissions.
...