Non admin has access to closed category

[fefrei (Felix Freiberger)]

@AlexBCodecademy

Maybe this is a bug? That post was under a child category in a private parent category. But when I created the child category within the private parent category, it did not keep the permissions.

This is intended behavior – permissions do not inherit. (I don’t like that – I’d prefer it if the permissions of subcategories were always at least as restrictive as the parent category.)

@AlexBCodecademy

I am still wondering also, how he found it. The category was not listed in the drop down for him…(when it was “everyone” can see/reply..)

He could have received a link to the topic, or maybe he has guessed the topic ID?