why everybody can create a publication without login?

[Yves Yu]

Hi, all,

I'm a new to Lenya, just a very simple question, why everybody can create a
publication in the Lenya without login? How can I control it with authority?
It seems access-control only take effect inner publications.

Yves