The variable [$ASSET_ENTRIES$] in the subscription email of the asset publisher is not filtered by permissions.
- Create a asset publisher displaying the documents.
- In the document library add a file and give the permissions to this file to a particular site's team
- With a site member not in this team subscribe to the asset publisher by email.
- The user receive an email tell him a news asset ahve been created and he seen the file for which he doen't have the right.
In the asset publisher the file is not displayed, but in email it's in the asset list.