I have a SharePoint Online publishing site with a home page that contains an image from the "Images" document library. The "Visitors" group on the site has "Read" access to this document library. I've added "Everyone but external users" to the "Visitors" group. When one of the users goes to the home page they are unable to see the image and if they try to go to the image directly through the address bar they get an "Access Denied" message. However, if I give the "Visitors" group "Contribute" access to the "Images" document library then they are able to see the image on the home page.
It makes no sense to me, but why would I need to give them "Contribute" access just to be able to see the image? Why wouldn't "Read" access be enough?