LSF9 Form/user Security tables

I know there is the User Security Report in Lawson where you can choose objects and it shows who has access to them, but our auditors want to be able to run adhoc queries about various forms and at various times to find out everyone who has access to a specific form. For 'auditing' reasons, they don't want this done from the internal Report by a Lawson administrator, they want to do it themselves.
My question is what files would I need to hit in a query to gather this information? An example would be to show them all users who have access to CB20.1, etc.
Lawson would not give me the information, but just kept referring me back to the User Report. Any help would be greatly appreciated!!