In the common space the default setting is for all content (such as posts and comments) is viewable to anyone on the internet - **including people who are not registered Waves users.**
You can override this on a per-post basis, making posts visible only to registered users.
