Description

When using the Banners component, if a banner category’s Access Level is set to “Registered”, its banners are still displayed to the public.
This means that unauthenticated users can see banners belonging to a category that should only be visible to logged-in (Registered) users.

The expected behavior is that banners from categories restricted to “Registered” (or higher) access should only appear for logged-in users.

Steps to reproduce the issue

1. Go to Components → Banners → Categories in the Joomla administrator.
2. Create two categories:
   • Category A – Access Level: Public
   • Category B – Access Level: Registered
3. Go to Components → Banners → Banners and create:
   • Banners assigned to Category A
   • Banners assigned to Category B
4. Ensure all banners are published and have a client assigned.
5. On the front-end, while logged out:
   • View a module or position that displays banners.
   • Observe: Banners from both Category A and Category B are visible.
6. Log in as a “Registered” user.
   • Banners from Category B are visible (expected).
7. Log out again.
   • Banners from Category B remain visible (unexpected).

Expected result

Banners should respect the access level of their parent category:

• If a banner’s category is Registered, only logged-in users with that access level (or higher) should see it.
• Public visitors should not see those banners.

Actual result

All banners, including those from Registered categories, are displayed to Public users.

Additional Notes

• Joomla 5.4.0
• May be related to a similar prior issue: #44964 – Banner Category Access Level issue