SilverStripe\Blog\Model\BlogPostFilter

This is responsible for filtering only published posts to users who do not have permission to view non-published posts.