Security access difference between function and filter...

 I saw report created on custom objects to which user have had no access...In some column was created function which works on Custom object to which user with specific role have had no access -> report works and gives results;

When designer made filter based on Objects without access report gives sql error... -> report doesn't work.

Anyway, question is what is the difference between using restricted objects in function and filter...