I set protections for a specific role, but it seems that no-role users ("authenticated" default role) get this protection too.

Any means to protect a role without protecting any authenticated user?

thanks