userid@SOURCE: just handles the SSH connection, but filesystem permissions are a separate layer. Your user still needs execute on each directory in the path and read on the files themselves. That’s why 666 on a file isn’t enough, and why it “works” under /mnt but fails at the mountpoint. Directories need execute to traverse.