Content Access

Drupal allows you to customize who can view and modify content.

Permissions are defined per entity type in the permissions table.

Set them per entity on it's manage permissions tab.

Core Permissions

Aka "View published content". This is granted to all users by default.

If content authors can create unpublished content, they should have access to it as well.

There are many modules available that restrict access. They are in various states of development, so some digging is needed to find what works.

https://www.drupal.org/project/private_content

Option to set content type to private. Can be overridden per node.

Grant roles access per content type. Users can grant permissions to others.

Role based content type access.