How to reproduce

• Set read access to anonymous to all sitemap
• Do not enable read access to anonymous to all contents
• Edit a content into a page and insert a link to a attachment
• Link on attachment link

With a have 403 forbidden error.
I have read access on a content because of I have read access on its page.
But when getting the attachment we check read access on the content only (not its page)