Check the write ACL on sys_report.
We saw this issue on some of our customers. Apparently one of the Orlando patches added two roles to the write ACL: report_group and report_global. Those seem redundant with the script that check if users should be able to write or not, and those roles are not on new OOTB instances. They basically remove the ability for anyone to save reports unless they have report_group or report_global.
