Add "Can't see" logic to category permissions

[Falco]

Many duplicates on this.

New category permission - "cannot see"/"exclude"

Continuing the discussion from Suspend as way to expire membership: After suggesting to another user that instead of suspending a user they could put them in a group and change category permissions. I recently came across my own use case for this, where I needed to add some users to my instance and only give them access to one category. It does not seem like there is an easy way to do so, without modifying the permissions for every other category, and putting all other users in their own grou…

Negative group permissions

Make a shadow group that excludes the users is the best you can do now.