I'm not sure I understand your question.

stored procedures are normally used as the source for a dataset, which you use in the report.

Once you create your report, you grant users the right to view it. If a user doesn't have permission to view a report, it won't show up when he goes to the URL to which the reports are published. That's the way SSRS works.