We're using the Github auth and Matrix Auth plugin for configuring build permissions.
We're using curl with basic auth to trigger builds remotely on this Jenkins.
Most of the time that works well, but seemingly randomly the builds are rejected because of missing permissions:

'javax.servlet.ServletException: hudson.security.AccessDeniedException3: userxxx is missing the Job/Build permission: 200'

We're running some dozen builds per day and in average 2-3 builds fail. One some days more, on other days no builds fail.

I've tried to find more info by enabling more fine grained logging and this is what I could get.
When the builds fails, the user is missing any GrantedAuthorities:
'FINE hudson.security.SidACL hasPermission2: hasPermission(UsernamePasswordAuthenticationToken [Principal=userxxx, Credentials=[PROTECTED], Authenticated=true, Details=null, Granted Authorities=[]],Permission[class hudson.model.Hudson,Read])=>true'

on successful builds he has the expected authorities:
'FINE hudson.security.SidACL hasPermission2: hasPermission(UsernamePasswordAuthenticationToken [Principal=userxxx, Credentials=[PROTECTED], Authenticated=true, Details=null, Granted Authorities=[authenticated, website, ...]],Permission[interface hudson.model.Item,Build])=>true'
 
I've tried to find an existing bug report, but couldn't find anything matching.
Maybe this is related, but I'm not sure JENKINS-72209