How to prevent No Self-Service users from duplicating reports

Having an issue where users in a group with collection level View access and Data level "No Self Service" access are able to duplicate reports. Is it possible to prevent users from being able to do this?

They’ll be able to duplicate always to their personal collection. Try using a reverse proxy to block the api calls