Authorizations is a big one. Crystal basically only checks to see if you have authorization to a table or not from my experience. It doesn't take into account whether or not you should be able to see table contents. This is the main reason we do not use it.
