Control center currently lets users create a restriction with both the fieldtype and category set. This is a confusing user experience particularly when they are allowed to choose a category and a fieldtype that is not in that category. The better user experience would be to disable the category if a fieldtype is chosen, or vice-versa.
The interface don't respect the rule defined in the documentation:
https://community.inriver.com/hc/en-us/articles/360012112714-Restricted-field-permissions