I am the one having this issue.
What is being accessed is a page that has only quest web parts on it. Users have read only access to the entire site. The quest web parts connect to a list elsewhere on the site which the users have read only access to.