Since new.drupal.org was launched on a deadline with many contributors, we audited permissions on the site before opening up SSO to all Drupal.org users. During this, we discovered things that could have been done better in D7. The security team role has “bypass node access” which is an overpowered permission.
The security team role will retain Administer content, so most node access will remain. What will be missing is access to unpublished nodes. They will need access to unpublished:
Active
3.0
Code