I'm thinking about implementing the pentaho report viewer in my site, which loads a report through an URL. These reports should not be viewable by anyone though. I will implement my own access policy for them, within my application, but there is a problem I think: the report URL can easily be copied and passed on to other, no?
What I also want, is that my users cannot change the url by hand (maybe only for some parameters, but others should be fixed, like "company", to filter in my database).

What would be the best way to do this? I'm using PHP, and I've installed BI CE 4.1.0 stable.