[Zope-CMF] private and pending items

[Fearless Froggie]

I just set up a CMF portal with a couple of custom
types and noticed that private and pending items are
viewable if the user knows the URL for them. They are
also found by the search script. (Note -- these are
viewable by all users, even if not signed in.)

I don't see any security settings that would change
this.

Is this normal? Should I just customize the search
page so it doesn't return pending or private items? Or
have I lost track of something along the way in
creating these custom types.

I've notice that items are generally accessed through
the portal_catalogue class where you can specify
whether you want the pending/private or published
items.

Any thoughts would be much appreciated. 

Many Thanks, Rita.

__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com