make sure in the category security settings allow “everyone” or whatever group the members are in have the create permission.
create
also might want to check that the min trust level to create topic is set appropriately.