does your users will create reports themself or only the developpers will
create reports and the users will use these reports?

for the second case, near any reporting tool do the job, its the role of the
developper to use correctly the user login into the SQL queries.

for the first case, Microsoft Report Builder, Business Objects, Cognos
ReportNet, can allow your users to create reports and apply security
automatically.
I think there is more tools on the market.
also, you can secure the rows in the database directly by creating views
where the security is applied, so the user will always query these views
instead-of the tables. (for example, in SQL Server you can use the
suser_sname() function to retrieve the login name of the current user)

but I recommand to take a look at OLAP cubes.
this technology is better to manage and apply a good security.