it works fine for new posts, only the allowed category is displayed. and posts only in the allowed categories are listed. however, posts in different categories can be edited if the user enters the right editing URL. it's a severe security bug!
if it's solved it will be a useful plugin.