re #122 - show unpublished items only to users with core.manage access