since it sounds like you don't wantto remove permissions, but to prevent it from running with all default parameters?

can you modify the stored proc itself?

that's the low hanging fruit, i think, easiest to modify with no other changes.

you could have it test for no parameters + a signiture related to reportserver: hostname of the reportserver, or the suser_name() it uses, and have it return no rows/one row or something in that situation. maybe an additional default parameter, it really depends....