I am using Tableau 8 server with local auth (not AD).
If I pass include the :format parameter in my url for viz within a new browser session I get a 403 error. Removing the parameter I get the tableau server login as expected. If I am already logged in an have the :format parameter, the server renders the viz, also as expected.
Is the 403 by design? If so, would it go away if I was using AD integration on the server side?