Note that users need at least the access content permission to be able to deal in any way with content. Furthermore note that content which is not published is treated in a different way by drupal: It can be viewed only by its author or users with the administer nodes permission.