When Campaign visibility is Private you have given access to the publisher.
Block Publisher

To quickly disable publisher access to campaign enter the publisher's name and hit save. There is no limit on the publisher’s count. After saving this the access is also removed from API.