But how to enable members of the groups to create new pages within their category and nowhere else?
I've setup workspaces via Workspace UI, so categories and groups and namespaces are automagically created for me.
Yet, when User1 in Group1 edits templ:_:Namespace1 (default homepage for Workspace1) to contain a link to templ:_:Namespace1:_:Page1 simply by adding "Page1", then following the link with User1 results in "permission denied to edit the page".
When an admin creates that page and User1 follows link to view it, it again says "permission denied to view the page" this time.
Only when I manually add that "subpage" to the category, then User1 can really use that new page.
That's ... cumbersome.