# Forgotten new permissions in the category security tab

**URL:** https://meta.discourse.org/t/forgotten-new-permissions-in-the-category-security-tab/122481
**Category:** UX
**Created:** [July 9, 2019, 6:43pm UTC](https://meta.discourse.org/t/forgotten-new-permissions-in-the-category-security-tab/122481 "2019-07-09T18:43:16Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [July 9, 2019, 6:43pm UTC](https://meta.discourse.org/t/forgotten-new-permissions-in-the-category-security-tab/122481/1 "2019-07-09T18:43:16Z")

</div>

Continuing the discussion from [Auto-add permissions/unsaved permissions prompt](https://meta.discourse.org/t/auto-add-permissions-unsaved-permissions-prompt/100919):

I think we need to go a bit further in this.

 ![image](https://global.discourse-cdn.com/meta/original/3X/7/1/711b0621369653c48270d8a68af4cbe87438b8a9.png)

If you have a pending change (1) and click on save we should stop you and say that you have pending changes to apply, in a “Are you sure” thing.

---

<div class="post-metadata">

### Author: ![awesomerobot](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/awesomerobot/32/142900_2.png) [@awesomerobot](https://meta.discourse.org/u/awesomerobot)
#### Post date: [July 9, 2019, 7:32pm UTC](https://meta.discourse.org/t/forgotten-new-permissions-in-the-category-security-tab/122481/2 "2019-07-09T19:32:11Z")

</div>

should we even need to click save? I feel like clicking the add button should be enough?

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [July 9, 2019, 7:40pm UTC](https://meta.discourse.org/t/forgotten-new-permissions-in-the-category-security-tab/122481/3 "2019-07-09T19:40:22Z")

</div>

I like save. It’s an extra step to ensure the permissions are correct. Without it, if I select the wrong group in the dropdown and click the ➕, they get access immediately, without an opportunity for me to fix it.

---

<div class="post-metadata">

### Author: ![eviltrout](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/eviltrout/32/5275_2.png) [@eviltrout](https://meta.discourse.org/u/eviltrout)
#### Post date: [July 11, 2019, 4:39pm UTC](https://meta.discourse.org/t/forgotten-new-permissions-in-the-category-security-tab/122481/6 "2019-07-11T16:39:37Z")

</div>

One thing that makes this slightly more complicated is the “Save Category” button applies to content on all tabs/pills right now. The warning should probably apply if you’ve made changes to ANYTHING on any section if you hit the X.

---

<div class="post-metadata">

### Author: ![eviltrout](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/eviltrout/32/5275_2.png) [@eviltrout](https://meta.discourse.org/u/eviltrout)
#### Post date: [July 12, 2019, 1:41pm UTC](https://meta.discourse.org/t/forgotten-new-permissions-in-the-category-security-tab/122481/9 "2019-07-12T13:41:31Z")

</div>

Hey @Osama can you take this one? It should be pretty straightforward but let us know if you encounter any issues.

---

<div class="post-metadata">

### Author: ![Osama](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/osama/32/98013_2.png) [@Osama](https://meta.discourse.org/u/Osama)
#### Post date: [July 26, 2019, 10:34am UTC](https://meta.discourse.org/t/forgotten-new-permissions-in-the-category-security-tab/122481/10 "2019-07-26T10:34:42Z")

</div>

PR for this:

[https://github.com/discourse/discourse/pull/7947](https://github.com/discourse/discourse/pull/7947)

Screenshot:

 ![image](https://global.discourse-cdn.com/meta/original/3X/8/d/8dc057e5690074d5473b2908630083cfdd72c519.png)

The save category button will trigger the warning if the user changes one of the dropdowns and doesn’t click the plus button. They can click save again and it will ignore the pending change and save anyway. Clicking the plus button will reset the trigger, so if they don’t change the dropdowns after clicking the plus button, the warning won’t be triggered.

Also I changed the plus button color to primary so it stands out a bit more.

Does this sound OK?