There could be multiple explanations, it's not possible to answer your question without additional information.
Here is usual cases:
- Your users don't have appropriate ROLE assigned to them.
- Somebody change permissions in repository for a role on some level, usually it's permissions for "ROLE_USER"
- Somebody renamed "ROLE_USER" to something else
- Some sub-resources are not allowed to be read.
etc ...