Sap Fiori launchpad 403 Forbidden metadata

Question

I get a "403 forbidden" error (metadata of the application) after deploying the app on our new system. The Launchpad and also the Launchpad Customizer works, but as I open the application it leads me to the app but no data. metadata always 403. Also if I call it directly in the browser, the funny thing is that the gw_client works perfectly (send requests to our backend and receive data). Our architecture is we have a frontend server and a backend, sm59 RFC connection are done and works also the trust connection. RFC trace says nothing, user authorization transaction says nothing. It's a HTTP connection, what else can it be? user roles are maintained in front + backend

Thanks