Resolved
Reported for: Toolset Access 2.7
Resolved in: 2.7.1
Editing permissions for a Custom Post Type in Toolset Access should also apply to single posts of that type when they are added to WordPress Menus (and displayed with the theme).
Since Access 2.7 these settings are not applied to posts in Menus. This means you can see and click on the menu items to which you might not have (read) access to.
However, the single post permissions work correctly so guests cannot see the posts after clicking on their link in the Menu.
Our developers are aware of this issue, and are working to fix it as soon as possible.