# Subcategoria não herda configurações de segurança
**URL:** https://meta.discourse.org/t/subcategory-does-not-inherit-security-settings/101122
**Category:** Support
**Created:** [2 Novembro , 2018 08:57 UTC](https://meta.discourse.org/t/subcategory-does-not-inherit-security-settings/101122 "2018-11-02T08:57:52Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@mishka](https://meta.discourse.org/u/mishka)
#### Post date: [2 Novembro , 2018 08:57 UTC](https://meta.discourse.org/t/subcategory-does-not-inherit-security-settings/101122/1 "2018-11-02T08:57:52Z")
Hi 🙂
I created category and on the Security tab changed permissions from _everyone_ to our _internal_ group.
Later I created a subcategory inside. I did not change it’s security settings, i.e. it remains “accessible” by _everyone_; but of course they cant visit it because it’s parent category is not listed on the front page of the forum, as I thought.
Also I created topics inside this subcategory. A assumed that they will be inaccessible to others. And at first sight it was so. But later my _test_ account received digest email message with that private topics inside. I was shocked. Currently the forum is under construction so nothing bad actually happens…
I investigated this and find out the following:
1. Subcategory does not inherit security settings of it’s parent. At least a checkbox _Inherit_ should exist, checked by default.
2. So topics from such an “not closed, not open” subcategories are accessible:
- in the latest topics list
- by direct link
- in email digest
Example screenshot of latest topics:
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [2 Novembro , 2018 11:00 UTC](https://meta.discourse.org/t/subcategory-does-not-inherit-security-settings/101122/2 "2018-11-02T11:00:39Z")
That’s right. Security settings are not inherited by subcategories. You’ll need to adjust those permissions to match the parent if that’s what you want.
---
### Author:  [@cpradio](https://meta.discourse.org/u/cpradio)
#### Post date: [2 Novembro , 2018 12:29 UTC](https://meta.discourse.org/t/subcategory-does-not-inherit-security-settings/101122/3 "2018-11-02T12:29:26Z")
Yep, this is by design, and many topics over the matter
[https://meta.discourse.org/search?q=category%20inherit&expanded=true](https://meta.discourse.org/search?q=category%20inherit&expanded=true)
There is some discussion around adding some additional validation ensuring the child category meets the same security permissions as the parent though at [Shouldn't a category be the mother of all subcategories? - #3 by sam](https://meta.discourse.org/t/shouldnt-a-category-be-the-mother-of-all-subcategories/92954/3)
---
### Author:  [@mishka](https://meta.discourse.org/u/mishka)
#### Post date: [2 Novembro , 2018 13:18 UTC](https://meta.discourse.org/t/subcategory-does-not-inherit-security-settings/101122/4 "2018-11-02T13:18:03Z")
I believe it is counterintuitive. If you are disabling access to a book, you are disabling all pages, not just the cover.
May be it should be something like this?
- On subcategory creation: copy security settings of the parent.
- On changing parent permissions: ask admin if he wants to recursivly iterate over all children and update them.
---
### Author:  [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [2 Novembro , 2018 19:26 UTC](https://meta.discourse.org/t/subcategory-does-not-inherit-security-settings/101122/5 "2018-11-02T19:26:22Z")
> [@Subcategories do not inherit permissions from parent category](https://meta.discourse.org/t/subcategories-do-not-inherit-permissions-from-parent-category/17174):
>
> This is looks as a very severe bug, so apologies if someone already posted it, but I don’t know how to search for it. Here it goes: The bug Given I’m user who is not in the group staff, When I go to the main listing of topics - / root of the discourse, Then I see even the topics, that should be hidden to me, because I don’t have read privileges for them. Also, in the listing, I can see the topic title, but the topic category is hidden. When I click on the topic, that should be hidden, only…