Users incorrectly getting group membership upon joining

Is the topic you’re inviting the users to in an open category, or does the category have security on it?