CommitService.getCommit raise "You are not permitted to access this resource" for valid user

2015-07-06 18:50:50,171 ERROR [http-nio-7990-exec-11] some_user @1BEK3RTx1130x205640x8 1nc1728 127.0.0.1 "GET /rest/api/latest/projects/PROJECT/repos/repo/pul
l-requests/38882/merge HTTP/1.0" c.a.s.p.SomeMergeCheck Error checking pull request for required something
com.atlassian.stash.exception.AuthorisationException: You are not permitted to access this resource
        at com.atlassian.stash.internal.aop.ExceptionRewriteAdvice.afterThrowing(ExceptionRewriteAdvice.java:36) ~[stash-platform-3.10.2.jar:na]
        at com.acme.stash.plugin.SomeMergeCheck.check(SomeMergeCheck.java:51) ~[na:na]
        at com.atlassian.stash.internal.pull.DefaultMergeRequestCheckService.doCheck(DefaultMergeRequestCheckService.java:73) [stash-service-impl-3.10.2.jar:na]
        at com.atlassian.stash.internal.pull.DefaultMergeRequestCheckService.checkMergeability(DefaultMergeRequestCheckService.java:57) [stash-service-impl-3.10
.2.jar:na]
        at com.atlassian.stash.internal.pull.DefaultPullRequestService.canMerge(DefaultPullRequestService.java:365) [stash-service-impl-3.10.2.jar:na]
        at com.atlassian.stash.internal.rest.pull.PullRequestResource.canMerge(PullRequestResource.java:431) [stash-rest-3.10.2.jar:na]
        at com.atlassian.applinks.core.rest.context.ContextFilter.doFilter(ContextFilter.java:25) [applinks-plugin-4.3.7_1435123126000.jar:na]
        at com.atlassian.stash.internal.spring.security.StashAuthenticationFilter.doFilter(StashAuthenticationFilter.java:88) [StashAuthenticationFilter.class:n
a]
        at com.atlassian.stash.internal.web.auth.BeforeLoginPluginAuthenticationFilter.doInsideSpringSecurityChain(BeforeLoginPluginAuthenticationFilter.java:11
1) [BeforeLoginPluginAuthenticationFilter.class:na]
        at com.atlassian.stash.internal.web.auth.BeforeLoginPluginAuthenticationFilter.doFilter(BeforeLoginPluginAuthenticationFilter.java:77) [BeforeLoginPlugi
nAuthenticationFilter.class:na]
        at com.atlassian.security.auth.trustedapps.filter.TrustedApplicationsFilter.doFilter(TrustedApplicationsFilter.java:103) [atlassian-trusted-apps-core-4.
0.0.jar:na]
        at com.atlassian.oauth.serviceprovider.internal.servlet.OAuthFilter.doFilter(OAuthFilter.java:79) [atlassian-oauth-service-provider-plugin-1.9.10_143512
3126000.jar:na]

            Commit from = commitService.getCommit(new CommitRequest.Builder(
                    pullRequest.getFromRef().getRepository(),
                    pullRequest.getFromRef().getLatestCommit()).build());