[Zope-CMF] Who gets access to private documents?

[Kari-Hans Kommonen]

 From a CMF novice:

I am trying to understand and use the private/pending/published 
system. Our need is that

1) members should be able to navigate in all folders of the site

2) members should be able to prepare documents privately in any 
folder and then publish their own documents without need for anybody 
to review

Unfortunately, I have not found a description of how the various 
security parameters should be tweaked to make this possible. I have 
assumed that for the 1), we need to give members the "list folder 
contents" permission. That has made the folders and navigation 
available. However, in our tweaking of the security parameters, we 
have somehow made all the private files (files a member is working 
on, before "publishing" it) also available to any member on the site.

I would be extremely grateful if someone could help and explain what 
determines whether a member can access someone else's "private" 
document, and what security settings we should have in place to 
achieve what we want, described above in 1) and 2).

Also, where could I find some explanation of how the basic workflow 
is designed and how they can be adjusted / customized?

any help appreciated, Kari-Hans Kommonen