Have an site that is a mix of Anon and Restricted content (requires authentication). We have a picture library that is used by high level authenticated users to upload to display "advertisements" on both authenticated and unauthenticated pages (a graphic is choosen at random for display - any graphic in the library is a candidate for both authenticated and unauthenticated views).
We are using blob caching.
Currently the Picture Library is configured with ReadListItems for the AnonymousPermMask64 (among a few other permissions), but the AllowEveryoneViewItems permissions is set to False.
What is the difference between setting AllowEveryoneViewItems to True and having the AnonymousPermMask64 set to "ReadListItems"? Wouldn't these, effectively, do the same thing?
Should this picture library have the AllowEveryoneViewItems set to True given the scenario described?