How to allow user to duplicate and edit a report only when a report is shared to the user

[shiyinglee1]

How can I configure the permission for the following scenarios:

I would like to allow HR users to have the access to:
1. duplicate a shared report
2. edit a report when it is being created (duplicated) by the HR user.

This should restrict the HR user from:

1. viewing all available reports in Reporting that is not shared to the HR users
2. edit on any report that is not shared to the HR user
3. edit on report that is shared to HR user

[nlgro023]

Why not just remove the access to the All Reports tab and when you share reports you can nowadays say if People can edit it etc. Wouldn't that suffice?