Greetings, when I use the code below, the user can enter the page even if they don't have a role, did I forget to do something ?

jsx
<Route
                                path="/category"
                                element={
                                    /* This protects the "/" route so that it shows
                                  <Home /> only if the user is logged in.
                                  Else it redirects the user to "/auth" */
                                    <SessionAuth accessDeniedScreen={<Home></Home>}  overrideGlobalClaimValidators={(globalValidators) => [
                                        ...globalValidators, PermissionClaim.validators.includes("read:category"),
                                    ]
                                } >
                                    <SideBar>
                                    <Category ></Category>
                                    </SideBar>
                                    </SessionAuth>
                                }
                            />