[Zope-CMF] CMF 1.2: 'private' objects visible to 'Member' users

[Ernie]

I'm using Zope 2.5.0 with the Mar 2003 hotfix, CMF 1.2.

For some reason, newly created objects which are still 'private' can be seen by
other ordinary members in the folder listing, and furthermore, viewed. However,
anonymous users will not see such resources in the folder listing.

The permissions "access future/inactive portal content" are not checked for
ordinary members.

Any idea why this may be so?

Thanks in advance -- cheers,ernie.