To achieve what you’re looking for, go to Roles & Permissions in the admin panel. Then, under the Read permission for the specific collection, set a filter like this:
{
"status": {
"_eq": "published"
}
}
This ensures that users with that role will only be able to fetch items where the status is set to "published".
I believe this is exactly what you wanted to achieve.