Added category_id's permission to listings controller