Really annoying bug this one, fixed the same way as Ant describes at...
The users were authenticating in Report Manager as
SOMEDOMAIN\MyUser
, while the ReportServer database was storing the users without the domain.
All I had to do was prepend the domain to the applicable users' names in
[ReportServer].[dbo].Users
.