To clarify that you tweak the configuration of reporting services so that when user is using the report it will know what folders/reports the user can see, restricting the data once a report is running, the straight forward bit.
It seems that later version of reporting services can do this.