Running into this as well. In our case, it appears to be related to the cookie "workgroup_session_id" being set. Once it is set, then subsequent calls can use it. But when two or more Viz objects are created, the server doesn't seem to want to accept the second call since it just sent back a cookie?
So basically, if you have say 4 Viz objects (loading async):
- On the first attempt: One Viz renders. The other three get 403 and the Forbidden Action alert.
- Simply refreshing the page after the first attempt: All 4 Viz objects render fine.
- After the session timeout period, or if the workgroup_session_id cookie is removed, back to the first attempt behavior.
Be interested if anyone has a workaround short of waiting for the cookie from the first one to arrive.
Alternatively, would be helpful to know a 403 occurred, eg. a render failed event. It is buried in a POST call from the iframe, which we don't have access to (cross-origin), so instead have to wait for onFirstInteractive to NOT happen, meaning a timeout.
This is also in Tableau 9 / tableau-2.0.0.js.