Today when assigning access to roles to specific categories, this access is not inherited to sub-categories. This puts a huge limitation to the use of differentiated access for different security groups, because new sub-categories will not automatically be included in the security group.
If access to a particular category could be automatically inherited to sub-categories - both existing and any future sub-categories, this would greatly expand the use of using security groups.