Raspberry π

Decided to see if I could run the digizero on lite which is doable with a simple command

cvlc stream.url

This is run by a new bash script launch.sh

To auto run it needs the network connection to have established so I've created new service using network-online.target check as detailed in the answer to this similar example:

https://raspberrypi.stackexchange.com/questions/93538/run-a-system-startup-script-after-network-and-dns-resolution-are-available

This throws up errors though found via journalctl:

digizero (aunch.sh)[448]: launch.service: Failed to execute /home/pi/launch.sh: Permission denied 

digizero (aunch.sh)[448]: launch.service: Failed at step EXEC spawning /home/pi/launch.sh: Permission denied 

I can run launch.sh manually fine still so not sure why permissions kick in at boot?

Any ideas on what might be the cause?

Edit: looks like it's a vlc feature not a bug?

VLC is not supposed to be run as root. Sorry.
If you need to use real-time priorities and/or privileged TCP ports
you can use /usr/bin/vlc-wrapper (make sure it is Set-UID root and
cannot be run by non-trusted users first).