Together with node access module and the modules described in the post you can have a descent node permission system. It handles published/unpublished vars by content type, it handles by content type and by node role access for crud. The manager enables you to have a better overview.