You need to check the ACL's of all of the databases that are used as datasources and ensure that both the signer of the xpage as well as the user accessing the xpage are listed with the appropriate rights.
Check the console.log file as well as the notes log nsf that should give you more detail on what resource access is being denied too.