Salesforce Knowledge: article types and data-category visibility

A support team at a telco called me in because their knowledge base "had a permissions bug." The symptom: a content editor on the marketing team had published a how-to article, customers could see it