Really annoying bug this one, fixed the same way as Ant describes at...
The users were authenticating in Report Manager as
SOMEDOMAIN\MyUser, while the ReportServer database was storing the users without the domain.
All I had to do was prepend the domain to the applicable users' names in
[ReportServer].[dbo].Users.