fix categories.loadMore so it checks read permission