bugfix on permission: listPermissionCategories should return an array