User access to workspace reports

Hi

I have set up a list of users within my company to be either View or Member access. However, other users within the company domain can still access the report just if they have the URL (e.g. we have a generic customerservice account that isn't on the list). Users on the list are sometimes logged into the cutomerservice account automatically and can still view the report as normal. How do I fix this?

Thanks