diff --git a/src/privileges/categories.js b/src/privileges/categories.js
index 67d71d1002..d2f4938a7b 100644
--- a/src/privileges/categories.js
+++ b/src/privileges/categories.js
@@ -102,7 +102,7 @@ module.exports = function(privileges) {
 			}
 
 			cids = cids.filter(function(cid, index) {
-				return !results.categories[index].disabled ||
+				return !results.categories[index].disabled &&
 					(results.allowedTo[index] || results.isAdmin || results.isModerators[index]);
 			});