# サブカテゴリはセキュリティ設定を継承しません

**URL:** <https://meta.discourse.org/t/subcategory-does-not-inherit-security-settings/101122>\
**Category:** Product Support\
**Created:** [2018 年 11 月 2 日午前 8:57 UTC](https://meta.discourse.org/t/subcategory-does-not-inherit-security-settings/101122 "2018-11-02T08:57:52Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![mishka](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mishka/32/126223_2.png) [@mishka](https://meta.discourse.org/u/mishka)\
**Post date:** [2018 年 11 月 2 日午前 8:57 UTC](https://meta.discourse.org/t/subcategory-does-not-inherit-security-settings/101122/1 "2018-11-02T08:57:52Z")

</div>

Hi 🙂

I created category and on the Security tab changed permissions from _everyone_ to our _internal_ group.

Later I created a subcategory inside. I did not change it’s security settings, i.e. it remains “accessible” by _everyone_; but of course they cant visit it because it’s parent category is not listed on the front page of the forum, as I thought.

Also I created topics inside this subcategory. A assumed that they will be inaccessible to others. And at first sight it was so. But later my _test_ account received digest email message with that private topics inside. I was shocked. Currently the forum is under construction so nothing bad actually happens…

I investigated this and find out the following:

1. Subcategory does not inherit security settings of it’s parent. At least a checkbox _Inherit_ should exist, checked by default.
2. So topics from such an “not closed, not open” subcategories are accessible:

- in the latest topics list
- by direct link
- in email digest

Example screenshot of latest topics:

 ![latest-topics-security](https://global.discourse-cdn.com/meta/original/3X/0/f/0f1312cc57a41d15d2be114e66a68adbda8bcaf2.png)

---

_[View the full topic](https://meta.discourse.org/t/subcategory-does-not-inherit-security-settings/101122)._