.User is the "anonymous" user.
When a user insert a content Drupal send him to the node page, but If
the content is not published at run time the user see an Access Denied
Page.
Drupal 6.x doesn't works in this way. Node is accessible to author though it is unpublished.