A bug was introduced in Release 2005-09-19 which caused to RSS/Atom Feeds and the RecentChanges list to ignore ACL settings.
How to fix:
Replace the inc/common.php with the one found at
http://dev.splitbrain.org/download/darcs/dokuwiki/inc/common.php or fix the error your self by chnaging the function _handleRecent() around line 624:
The new one should look like this:
...
// exclude subnamespaces
if ((!$subNS) && (getNS($id) != $ns)) return false;
// check ACL
if (auth_quickaclcheck($id) < AUTH_READ) return false; #<--- This fixes the problem
// check existance
if(!@file_exists(wikiFN($id))){
if(!$incdel){
return false;
...