I tested your site and got to a conclusion that the reason of the described issue with access to restricted pages of logged-in users as they are not logged-in is the caching plugin, which shows to a logged-in user the cached copy of a page which was built for not logged-in visitor and thus, contains access error message.