Category security settings reset when changing parent/subcategory relationship

[Moin]

Steps to reproduce:

1. Enable the upcoming change “Enable simplified category creation”
2. Create a category “Test category”
3. Create a category “Test subcategory”
4. Enable the “advanced settings” and go to the “Security” tab
5. Add a group to the security permissions of the subcategory and remove the reply and create permission from “everyone”
6. Save the changes and refresh to confirm they were applied
7. Go back to the “General” tab and remove the category from the “Subcategory of” setting.
8. Save your changes and check the security settings again

Expected result: The previously configured security settings remain unchanged, as they do when the “Enable simplified category creation” setting is disabled.
Actual result: The security settings are reset without warning, allowing everyone to create and reply to topics again.

Note: The same permission reset occurs when converting a category into a subcategory or when changing its parent category.

[mcwumbly (Dave McClure)]

Thanks for the detailed report.

I had seen something like this before, but thought it was fixed. We’ll take a look.