Unfortunately there isn't a way to do this natively. If you have rights to see the report in the list you can run the report. I can see a use case where you might want a user to know a report exists, but not be able to run it, but I would think that would be a rare case.