Bug: When a library is unpublished, but the teaser block for the library is shown in a region, the block is visible to all users (including anonymous), allowing anyone who an see the block to see the unpublished node.
Fix: Check node_access when generating block content in hook_block_view. If the user may not see the node, return an empty block.
Bug: When a library is unpublished, but the teaser block for the library is shown in a region, the block is visible to all users (including anonymous), allowing anyone who an see the block to see the unpublished node. Fix: Check node_access when generating block content in hook_block_view. If the user may not see the node, return an empty block.