I was playing with pentaho over the weekend and must say I am impressed with what I have seen.
The report designer is now very functional. I am going to have to play with it a bit more to be understand what can be done fully but producing a report with parameters is really easy once you get a hang of the tool.
(I click on the query you want to modify and modify the sql instead of using the edit button)
I replaced the pentaho security implementation with my own implementation and was surprised to find out how easy the spring security implementation was (one thing I wrote my own GrantedAuthority implementation which was a bad idea the default one org.springframework.security.GrantedAuthorityImpl works well and includes an equals, hashcode and compareto which mine did not and didnt work and implementation)