If a node does not have connect permissions, it cannot join the network, so it won't be able to see the transactions to mine, nor broadcast the blocks it has created.
However it's quite possible to have multiple addresses in a node, and for one of these to be granted connect permissions, and the other mine permissions.