I changed one parent category's 'Access Permissions' and on the front end the child category and files list is hidden with the insufficient privileges message. However I can still go directly to that file if I know the URL path. If I change the individual file's 'Access Permissions' then if I browse that file via the url, I am unable to access it.
Why isn't this feature the same on both category and individual file permissions?