unpublished resources are not being restricted

I went to edit some resources that are in production on our website, and noticed that the home page (parent resource) for this particular site was italicized... set as ’unpublished’. My first thought was that someone must have just done this (or I’d have heard complaints). But I checked on the live site (in a browser where I wasn’t logged in to the manager) and the page is still viewable although unpublished. I checked a few other unpublished pages too, and they are viewable on the web.

I upgraded Revo to 2.0.8, and the problem persisted.

I glanced at the access control policies, but didn’t see anything abnormal.

Other installs are working normally in this regard (unpublished resources are not available in the browser, as one would expect).

Can anyone think of a quick explanation for why this would be happening?

Unless they were cached as published and when edited the clear cache checkbox was unchecked, I have no explanation for such behavior, nor can I reproduce it easily...

I have a feeling that it is gonna be some bizarre combination of policies that only someone with my uncanny knack for disaster could possibly have managed...

Fortunately this install has a short shelf-life, since I’m in the process of moving sites off of it onto another which doesn’t have this problem.

Well, giving anonymous users view_unpublished permission on a context could certainly be a problem, but otherwise, I can’t think of much that would cause that.