Lead/deal report 500s when a child-table column is selected

Permission conditions now properly qualify column names to avoid ambiguity when child tables join.