Hello @SP_13734001,
To help narrow this down, could you please confirm a few details:
- Are you using ThingWorx basic authentication or (LDAP/SSO method)?
- Does this behavior occur for all users or only certain users, even if they belong to the Administrators group?
- Do the affected users have Run Time and Visibility permissions not just on the mashup, but also on all dependent entities (Things, Services, Data Shapes, etc.)?
- Are users able to open the mashup in Composer preview, or does it fail only in runtime?
- Could you share any relevant entries from the ApplicationLog.log when the 403 occurs (especially authorization or security-related errors)?
- When the issue occurs, do you see any failed requests or errors in the browser Developer Tools (Console/Network tab)?
- Are you accessing ThingWorx via a reverse proxy or load balancer, or directly on the server?
From the behavior you described (working in incognito and after restart), this could also be related to session/cookie handling or cached authentication state, so checking browser/network logs will be very helpful.
Looking forward to your findings, this will help identify whether the issue is permission-related, session-related, or environment-specific.
Regards,
Abhi