One addition to this, would it be possible to set these permissions per category? I have some categories which contain private material that only members of certain groups may see (and even may see that there is a resource at all in addition to being able to download it).