Solution: on the server, HIFIS users need permission to read the aspnet_client folder (where Crystal files are stored).