return an empty array if a categories permissions are not found