Can you read through this topic and see if it answers your question? Understanding groups and category permissions