wp-tinymce.php 404

wp-tinymce.php loads to the WordPress dashboard using Ajax on your end.

So the permission for that file should be 664.
But the problem is your /wp-include folder may not allow remote PHP execution. This may be either in .htaccess via some security plugin you are using or somewhere in Nginx rules.

Further, I think you are using some plugin that calls wp-tinymce.php in a strange way.