Locked and Unlocked

Choose "The report will not be updated and deleted  if satisfy the following expression", and click "Expression":

Building logical expression. If the logical expression is true, the service will lock the report instances satisfying condition. The logical expression will be executed at every hour.  The locked instances can not be updated and deleted if  user has no permission. Only administrator and report owner role have unlocked permission in my workbench.

SysVar:

SysVar.RepFillTime means the time that report be filled, and can not be altered.

SysVar.RepRevLasTime means the time user update last time, and can not be altered.