Auditor users can bulk select rows when they should not be able to

On the vulnerability report, auditor users can bulk select rows when they should not be able to:

As an auditor user, clicking on a row that's not on the description text should do nothing. Ideally we should also hide the pointer cursor to further hint that the row is not clickable, but keep the hover effect.