[Using Sakai] Unpublished site content available - feature or bug?

[Algaze, Louis Contractor, eDataTech]

While troubleshooting an instructor's question today, I realized that she has a web content item showing the Resources area of an unpublished site with the content set as Only members of this site can access the content.  If a student is enrolled in both sites, the site holding the Resources does not need to be published for student access.  Is this a feature or a bug?

I can see it as a feature as it would allow instructors to have a "repository" site that the students can not access in which to store all of their content.

I can also see it as a bug as content is available (security by obscurity) to enrolled students before instructors publish it.

Should it be like this?
Is it expected to change in the future?

Thanks,

Louis
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai-user/attachments/20120411/4b74b8ab/attachment-0001.html