authorisation to execute report from SE38

hi,

we want user to only execute report 'ZABC" only in the system. i know we can restrict this by giving S_DEVELOP with PROG and actvt 03 and 16 and program name as object name. But my security team is not comfortable with giving S_DEVELOP. is there any authorisation object that we can use to restritct user run only specific report.

thanks,

sankar.