Achim Wagenknecht and James Zandreiatti Here is the answer to your situations...both of yours. I put this on your other post also James about a loophole in privacy.

It's not a loop hole nor a security issue, just need to go to Studio --> Developer --> Menus --> Items and select in first drop down box 'System'  and 2nd box 'Site'

Now for each menu item, click on the Anyone link under Visible to column and change to selected levels, Account, Standard, Moderator, Adminstrator and Premium 

Do the same thing under Developer --> Pages and change the visibility for all of those. If you do not do this, then you can still go directly to the pages by mysite.com/pages/posts-home but if you do go through and setup visibility on your site, then you will have nothing to worry about. The pages will not be listed in the menu anymore and if they type in directly the url, it will say ACCESS DENIED and nothing will be displayed.

That's just another great feature and proof of how customizable the platform is. You can micro-manage every asset of the site.