When a user with Read only rights triggers a reload via an extension, whether it be a normal reload or a partial reload, a 403 Access Denied message appears.
Despite this the logs show that the reload was successful. So why is the error message appearing?
Environment:
Cause:
Working as designed. Third-party extensions are not supported, but even if one is used for a reload, the issue relates more to the permissions set in the QMC. To be more specific, users only have Read rights, but to perform a reload, Update rights are also required. More information can be found here Qlik Sense: User with Analyzer license cannot reload app data.
Resolution:
It appears that the only way around this would be to modify the extension or build a custom solution that performs the same actions under a different user if this is an option. The article in the cause section also mentions restricting users that only need Read access (consumers) to analyzers licenses, but even though they can perform a reload, they will still get an error message as they cannot save to the app, which in the end, is the same situation as before. To provide some sort of solution, if the extension is not the cause, and Update rights cannot be given, then the best option would be to speak with the author of the extension to see if they could build in a feature that allows for the option to select a custom user to run the API calls under other than the one using the extension.
