That sounds reasonable. From a database perspective you've got a many to many relationship between a Category and a User with permissions tied to this relationship.

Realize that there are some...