No permission to trigger downstream pipeline

GStreamer project CI triggers Cerbero CI with this snippet:

cerbero trigger:
  stage: build
  trigger:
    project: gstreamer/cerbero
    branch: main
    strategy: depend

Both repo are public, the main branch in gstreamer/cerbero repo is protected.

For some users that trigger fails with error "No permission to trigger downstream pipeline" (e.g. https://gitlab.freedesktop.org/thiblahute/gstreamer/-/pipelines/408551) but it works for some other users (I think they need to be maintainer in both projects?).

Since both repo are public and anyone can open a MR that runs a CI pipeline, I don't see why a trigger would have any restrictions. Is there a config I can change to make this work?