I have set up entity permissions and web roles that used to work. Now, any signed-in user can see everything (list filtering does appear to be working). I tried setting up a portal in a new environment (default permissions) - same problem. Even if I restrict a page, everyone can see it. Is this a system-wide issue?