=== modified file 'modules/node/node.module'
--- modules/node/node.module	2010-09-24 00:37:41 +0000
+++ modules/node/node.module	2010-09-24 16:13:14 +0000
@@ -2798,6 +2798,10 @@ function node_access($op, $node, $accoun
       if ($node->status) {
         $nids->condition('nid', 0);
       }
+      else {
+        // Unpublished nodes should not use default grant.
+        $query->condition(db_or()->condition('realm', 'all', '<>')->condition('gid', 0, '<>'));
+      }
       $query->condition($nids);
       $query->range(0, 1);