A published extension fails only for users with a read-only role. What should the investigation include?

1. Role-specific UI behavior and backend authorization responses
2. Removing all role checks to make the error disappear
3. The number of images in the application's logo
4. Only the release author's local branch name