Answered it myself... been studying the architecture for a bit. The Place's main.nsf ACL answered my question. Default is set to "No access".