the ignoreRole is probably not the way to go here. we should rather have a flag for the VIEW_PUBLIC attribute i propose above. then the template could just decide whether it wants to only show published content or also unpublished content the current user is allowed to see. this is much cleaner than handling roles in the templates.