Issue Running Scripts due to NotAuthorized Error

Version

4.3.2

Severity

High

Environment

msi

Steps to Reproduce

https://forums.ironmansoftware.com/t/invoke-psuscript-in-4-3-3-gets-not-authorized-worked-in-4-3-2/11010/15 https://forums.ironmansoftware.com/t/secrets-are-not-available-in-sub-script-how-to-fix/10953/19

Some example configurations that may cause this:

Access controls on a custom role that allow access to scripts.

I cannot reproduce this. Current configuration:

Access Controls

New-PSUAccessControl -Role "DashboardRole" -ObjectType "Script" -Type "View, Execute"

Roles

New-PSURole -Name "Administrator" -Description "Administrators can manage settings, create and edit any entity and view all the entities with PowerShell Universal." -Policy {
    param(
        [Security.ClaimsPrincipal]$User
    )

    <# 
  Policies should return $true or $false to determine whether the user has the particular 
  claim that require them for that role.
#>

    $false
} 
New-PSURole -Name "Operator" -Description "Operators have access to manage and execute scripts, create other entities within PowerShell Universal but cannot manage PowerShell Universal itself." -Policy {
    param(
        [Security.ClaimsPrincipal]$User
    )

    <# 
  Policies should return $true or $false to determine whether the user has the particular 
  claim that require them for that role.
#>

    $false
} 
New-PSURole -Name "Reader" -Description "Readers have read-only access to PowerShell Universal. They cannot make changes to any entity within the system." -Policy {
    param(
        [Security.ClaimsPrincipal]$User
    )

    <# 
  Policies should return $true or $false to determine whether the user has the particular 
  claim that require them for that role.
#>

    $false
} 
New-PSURole -Name "Execute" -Description "Execute scripts within PowerShell Universal." -Policy {
    param(
        [Security.ClaimsPrincipal]$User
    )

    <# 
  Policies should return $true or $false to determine whether the user has the particular 
  claim that require them for that role.
#>

    $false
} 
New-PSURole -Name "User" -Description "Does not have access to the admin console but can be assigned resources like APIs, scripts, dashboards and pages." -Policy {
    param(
        [Security.ClaimsPrincipal]$User
    )

    <# 
  Policies should return $true or $false to determine whether the user has the particular 
  claim that require them for that role.
#>

    $false
} 
New-PSURole -Name "DashboardRole" -Policy {
    $true
}

Expected behavior

Scripts Run

Users

User's view of the admin console

User Running a Script

Parent Script

$Roles
Invoke-PSUScript CacheProducts.ps1 -Wait -InformationAction SilentlyContinue

Child Script

$Secret:Test

Variables

New-PSUVariable -Name "Test" -Vault "Database" -Type "System.String" -Role @('DashboardRole', 'Administrator')

Actual behavior

Scripts cannot be run due to this error

Additional Environment data

No response

Screenshots/Animations