Module doesn't check if current user has permission to view own unpublished nodes.