# Inheritance of access rights for subcategories broken
**URL:** https://meta.discourse.org/t/inheritance-of-access-rights-for-subcategories-broken/48117
**Category:** Feature
**Created:** [2 augustus 2016 om 13:32 UTC](https://meta.discourse.org/t/inheritance-of-access-rights-for-subcategories-broken/48117 "2016-08-02T13:32:42Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@MPW](https://meta.discourse.org/u/MPW)
#### Post date: [2 augustus 2016 om 13:32 UTC](https://meta.discourse.org/t/inheritance-of-access-rights-for-subcategories-broken/48117/1 "2016-08-02T13:32:42Z")
Hello,
I just noticed a major bug in the inheritance of access rights for subcategories:
How to reproduce: Create a category where only a certain group of people has access to. Now create a subcategory, without further access specifications. That subcategory violates the access rights of its main category and will be publicly available.
Expected behaviour: Subcategories should never be able to gain more rights than their main category.
Discourse version: v1.6.0.beta12 +61
Regards,
MPW
---
### Author:  [@cpradio](https://meta.discourse.org/u/cpradio)
#### Post date: [2 augustus 2016 om 13:36 UTC](https://meta.discourse.org/t/inheritance-of-access-rights-for-subcategories-broken/48117/2 "2016-08-02T13:36:29Z")
This is by design, sub-categories do not inherit their parent permissions.
[https://meta.discourse.org/t/permission-changes-moderators-have-less/12522/36?u=cpradio](https://meta.discourse.org/t/permission-changes-moderators-have-less/12522/36)
---
### Author:  [@MPW](https://meta.discourse.org/u/MPW)
#### Post date: [2 augustus 2016 om 13:49 UTC](https://meta.discourse.org/t/inheritance-of-access-rights-for-subcategories-broken/48117/3 "2016-08-02T13:49:11Z")
Then this should be changed. At least by default during creation of the category.
---
### Author:  [@sam](https://meta.discourse.org/u/sam)
#### Post date: [3 augustus 2016 om 01:50 UTC](https://meta.discourse.org/t/inheritance-of-access-rights-for-subcategories-broken/48117/4 "2016-08-03T01:50:46Z")
Discourse does not have an implementation of inherited permissions between categories and sub-categories.
Totally fine to amend the UI to inherit from parent when creating new subcategories but the underlying permission system is category based with no inheritance. Changing this is a major piece of work that is not scheduled.
---
### Author:  [@MPW](https://meta.discourse.org/u/MPW)
#### Post date: [3 augustus 2016 om 07:43 UTC](https://meta.discourse.org/t/inheritance-of-access-rights-for-subcategories-broken/48117/5 "2016-08-03T07:43:08Z")
> [@sam](#):
>
> Totally fine to amend the UI to inherit from parent when creating new subcategories
Sounds like a nice plan and will keep admins from accidentally blowing confidential information, like it happened to us.
Thanks for looking into this.
Regards,
MPW