# Allow Users to See and Reply but not Create in Category

**URL:** https://meta.discourse.org/t/allow-users-to-see-and-reply-but-not-create-in-category/289138
**Category:** Support
**Created:** [December 19, 2023, 1:51am UTC](https://meta.discourse.org/t/allow-users-to-see-and-reply-but-not-create-in-category/289138 "2023-12-19T01:51:43Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![martyn\_thomas](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/martyn_thomas/32/344874_2.png) [@martyn\_thomas](https://meta.discourse.org/u/martyn_thomas)
#### Post date: [December 19, 2023, 1:51am UTC](https://meta.discourse.org/t/allow-users-to-see-and-reply-but-not-create-in-category/289138/1 "2023-12-19T01:51:43Z")

</div>

I’ve trying to limit a category so:

- users with ‘Keyholder’ role can Create/Reply/See topics in the category
- users with ‘Members’ role can only Reply (or edit if it’s a wiki post) and See topics in the category

I seem to be unable to limit access to the category/topic creating, to trouble shoot i’ve only set up the security for Members to See and Reply

 ![image](https://global.discourse-cdn.com/meta/original/4X/d/c/4/dc4e453e5c8bacfd8c8b76b8598bc743bad9ec95.png)

However Members are able to see the Category in the Composer drop-down and can create a topic in the category:

 ![image](https://global.discourse-cdn.com/meta/original/4X/a/c/d/acdced62a49263ca16c7955dfe885e85512750be.png)

Does anyone have any ideas on what i’m missing…  
Thanks

---

<div class="post-metadata">

### Author: ![Firepup650](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/firepup650/32/465200_2.png) [@Firepup650](https://meta.discourse.org/u/Firepup650)
#### Post date: [December 19, 2023, 3:55pm UTC](https://meta.discourse.org/t/allow-users-to-see-and-reply-but-not-create-in-category/289138/2 "2023-12-19T15:55:05Z")

</div>

> [@martyn\_thomas](#):
>
> However Members are able to see the Category in the Composer drop-down and can create a topic in the category:
> 
> ![image](https://global.discourse-cdn.com/meta/original/4X/a/c/d/acdced62a49263ca16c7955dfe885e85512750be.png)

Does pushing + Create Topic from there actually succeed? I’d expect it fails.

---

<div class="post-metadata">

### Author: ![martyn\_thomas](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/martyn_thomas/32/344874_2.png) [@martyn\_thomas](https://meta.discourse.org/u/martyn_thomas)
#### Post date: [December 19, 2023, 4:24pm UTC](https://meta.discourse.org/t/allow-users-to-see-and-reply-but-not-create-in-category/289138/3 "2023-12-19T16:24:02Z")

</div>

It works.- I’m able to create topics without issue. So i’m missing something as don’t want people to be able to create topics/see the topics in the category select dropdown

---

<div class="post-metadata">

### Author: ![JammyDodger](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jammydodger/32/254611_2.png) [@JammyDodger](https://meta.discourse.org/u/JammyDodger)
#### Post date: [December 19, 2023, 4:55pm UTC](https://meta.discourse.org/t/allow-users-to-see-and-reply-but-not-create-in-category/289138/4 "2023-12-19T16:55:52Z")

</div>

Hmm. That should not be possible. Are you using an admin to check this, or a test account?

---

<div class="post-metadata">

### Author: ![Lilly](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/lilly/32/575047_2.png) [@Lilly](https://meta.discourse.org/u/Lilly)
#### Post date: [December 19, 2023, 5:00pm UTC](https://meta.discourse.org/t/allow-users-to-see-and-reply-but-not-create-in-category/289138/5 "2023-12-19T17:00:43Z")

</div>

I have tested this just now on on my dev instance with latest beta and cannot reproduce on any device or browser I have (MacOS/iOS Safari/Chrome, Ubuntu Chrome/Firefox). Categories that a group has reply permission but not new topic post permission have the topic button disabled in that category and can still reply, and creating a topic from main page doesn’t show the category they don’t have new topic permissions to in the new topic category drop down selector. Disabled button even has an info tool tip.

> **Admin view: project category is secured from creating topic for test group**
>
> ![cat_permissions](https://global.discourse-cdn.com/meta/original/4X/a/d/4/ad471bb1f8d83b8519b2385d68907f32ae9deb5d.png)

> **User view: category not in drop down for new topic on main page**
>
> ![cat_dropdown](https://global.discourse-cdn.com/meta/original/4X/f/6/d/f6dd6181841df6e224f6a8869ed30be6b10d1d78.png)

> **User view: new topic button disabled on main page**
>
> ![topic_button_disabled](https://global.discourse-cdn.com/meta/original/4X/c/f/7/cf738fcd19b5103c26cc874fe4a4305b1c05829b.png)

---

<div class="post-metadata">

### Author: ![martyn\_thomas](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/martyn_thomas/32/344874_2.png) [@martyn\_thomas](https://meta.discourse.org/u/martyn_thomas)
#### Post date: [December 19, 2023, 5:25pm UTC](https://meta.discourse.org/t/allow-users-to-see-and-reply-but-not-create-in-category/289138/6 "2023-12-19T17:25:09Z")

</div>

You cracked it - I didn’t realise my test account was also an admin account _facepalm_  
Thanks for giving me the much needed kick.

---

<div class="post-metadata">

### Author: ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system)
#### Post date: [January 18, 2024, 5:25pm UTC](https://meta.discourse.org/t/allow-users-to-see-and-reply-but-not-create-in-category/289138/7 "2024-01-18T17:25:51Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
