don't you need to define that role in security.yml? and to make this complete, we should have an unpublished content and a hint on the home page that after logging in you see more. we should probably finish https://github.com/symfony-cmf/cmf-sandbox/pull/169 - i started that but never managed to get back to it to fix the tests.