Granting Run Report permissions on a specific report only

Question

Guys,
Is there a way to grant access to users only on a specific report so that users can run that report.
For example, we want to give access to a user group on a report "All deployments for a specified package and program".
Environment: SCCM 2012 R2
Steps Performed:
1. Created a security role called "Run specific reports"
2. Selected permissions for this role are ONLY, "Run Report" under Packages node
2. Added user group TB\XYZ in this role
As a result:
- User groups TB\XYZ were added in the security of all the reports in category "Software Distribution - Package and Program..."
- Users run the report "All deployments for a specified package and program" but don't see any values in Package drop down list. If we supply report parameter (package ID) in the report URL, it still does not work and shows incorrect
parameter value.
- Users can see all other reports and folders in SSRS e.g. when they access
http://servername/reports - this is not what we want.
Requirements:
1. What we want is to grant user group access only on one report "All deployments for a specified package and program" and all the related reports so that users can drill down further reports.
2. User cannot read data using SCCM console
3. User should not see/run other reports (we want to provide users direct report URL passing package/program ID as a paramter)
-- S Ahmad

Answer 1

How is granting read permission only to those object that you want them you have access to giving them too much permissions?
The permission in CM12 R2 are far better (from a reporting stand point) than in CM12.
Exactly which report are you trying to grant accces too and why?
What is the business case for this?
I just want to grant permissions on "All deployments for a specified package and program" report in such a way that users can further drill down to following three reports:
-Status of a specified package and program deployment
-All system resources for a specified package and program deployment in a specified state
-Package and program deployment status messages for a specified client and deployment
So total of 4 reports. In SCCM 2007, it was easy to give access in the properties of the reports only (asp based reporting). However in CM12 (or R2), reporting is based on SSRS and what I've found is that we have to grant rights on objects those are part
of above reports e.g. packages, collections, workstations etc.
Giving "Run Report" rights to users does not grant access on view the information related to packages, collection or workstatons so report shows as blank. Another problem with "Run Report" permission for "Packages" in Security role is that it grants "Run
Report" access to all the reports in Software Distributions section.
-- S Ahmad