If you withdraw an item via the XMLUI, and then visit the item page as a non-Admin, you are asked to login. After a valid login, the page displays: "You do not have the credentials to access the restricted item hdl:123456789/1". This is a misleading message as the item has actually been withdrawn and should be displayed as withdrawn.
If you happen to access a withdrawn item as an Administrator, you are displayed the item as normal (with no indication that the item is withdrawn). This is also misleading as the Administrator may assume that the item was not withdrawn successfully.
Rather than displaying such a "Restricted Item" message for withdrawn items, the following should probably happen:
(1) User is displayed an "Item has been withdrawn" message
(2) The page should return a 404, so that search engines are encouraged to remove the item from their indexes
(3) If an Admin accesses a withdrawn item, he/she should see a message that clearly states that the item is withdrawn (likely at the top of the page), while also seeing the normal metadata/files for the withdrawn item.