There is a Discoverer Report. All users with a responsibility for this report can access the report. However, a user with this responsibility should not be able to access this report (They can see that the report exists, but should not fetch data).
How can I do that? I looked for an example but couldn't find it.