Subcategory does not inherit security settings