some security checks
drag/drop of categories