Security almost fine for user except categories

Signed-off-by: Ondrej Rafaj <ondrej.rafaj@fuerteint.com>