post_status not working for future posts

Version 0.93 introduced post status sanitization for certain logged in users. If we use a post_status of ‘future’ this works OK for admins and editors, but users who are not logged in see posts with status ‘publish’.

The problem seems to lie with line 624 in lcp-catlist.php, in the ‘sanitize_status’ function. The ‘public’ array only contains ‘publish’ so if a user is not logged on and the lcp catlist arguments have a post_status of ‘future’, the intersection returns an empty result, leading to the defaults being applied. Thus admins and editors see all posts with status ‘future’ but non-logged in users see only published posts.