I t would be great to have a standardised role such as super user that you could assign at the category context and that those users were able to do all functions a super user would perform but only at the set category context.