Replace category by hierarchical permissions