Check cat edit privileges in model.

Move logic from controller to model.