it's me again

Recreating the bug enviroment.
1. Create group with permissions (global configuration) from screen1
2. Create category with permissions (from screen2) for the same group
3. Create a menu button Hotspot Submission Layout
4. Try to add a new hotspot > 403...
BUG: You get 403 can't access webpage. To fix it I had to allowe Create permission for my group (global configuration), but shouldn't the category permissions override the global permissions?
If not, than sorry for bothering You. Similar bug is in Joomla articles with Edit state, but that's diffrent story...