I personally don't like the approach of capturing user credentials at the report level. It is better to do this from the database inside of a stored procedure so...