An user has a profile and a permission set. In the profile, the user has no one checkbox related to reports or dashboards checked and in the permission set, only the checkbox "Create and Customize Reports" checked.
The point is that the user is able to create a report in the public reports folder.
The need is to allow to the user to be able to create and read private reports (when it is shared with him) but to be able only to read reports in the public report folder (not to be able to create).
What is wrong with the settings please?