permissions ignored - user can create any type of content

Hi.

I have installed a d5.15 site, and everything is very nice.. :)

I have created a role (news) and given that role access to the navigate module and the "node create news" content (a content-type I created).

When I login as the user (and I can confirm I'm logged in - by visiting /user) - I can go to /node/add and success in adding content types of totally other types.. both Page and others.

I have a hard time believing that Drupals permissions system doesn't work - so I must have done something wrong..

Any help to anything I could check would be very welcome.