overriding report permissions

overriding report permissions

If I set the permissions for a report to allow add, edit & delete the following code in an openurl will cancel these options.
"/view-perma/Board_Minutes?zc_EditRec=false&zc_AddRec=false&zc_DelRec=false"

However if I set the permissions to NOT allow add, edit & delete the following does not allow these features.
"/view-perma/Board_Minutes?zc_EditRec=true&zc_AddRec=true&zc_DelRec=true"

Is this the way it should work or do I have a problem with my syntax.
Note this is for a Customer Portal user.