I setup a second site and added a user with “view” access (but not “admin” access). I created a link using the md5 of the users password in the GET arguments to login to the stats. Clicking the link appears to log me in fine. I see the username next to “Hello,” at the top. I see the Dashboard fine.
The problem is when I click “Visitors” (or “Actions” or “Referers”) the page loads the Dashboard again. When I am logged in as the super user these links work fine and load the Visitors (or other) stats.