diff --git a/ayanova/devdocs/todo.txt b/ayanova/devdocs/todo.txt
index 823f3db4..e188ceb7 100644
--- a/ayanova/devdocs/todo.txt
+++ b/ayanova/devdocs/todo.txt
@@ -42,9 +42,7 @@ All platforms and browsers
 		- DONE WIRE up save menu item and add code to disable save on broken rules (and make red, disabled etc)
 		- DONE Move wire up event code from app.vue to gzmenu and call it from app.vue
 ###		- RIGHTS in form state so can easily enable / disable etc
-		- TODO: ?? DECISION server widget lists and other lists
-			- Either the list should show items with alternate icons to EDIT if they are read only or...
-			- Use a generic OPEN icon and link instead and user doesn't see status until they open it.
+		
 		- INFO - SERVER will return on request of an object one of these:
 					- DONE Not authenticated at all 401
 						- DONE Redirect to login 
@@ -64,7 +62,11 @@ All platforms and browsers
 			- If user attempts to load widget form but has no rights to widget server returns the NO rights code but that is triggering back to login
 				- Should it do this? Normally would not be an issue because it wouldn't open that form unless they saved or manually typed a link to it
 				- Technically it's incorrect, they don't have to login, they just can't get that record
-				- Have a look at why it's redirecting and decide if this is worth a change			
+				- Have a look at why it's redirecting and decide if this is worth a change
+			- LIST OBJECT RESEARCH / DECISION
+				- TODO: ?? DECISION server widget lists and other lists
+				- Either the list should show items with alternate icons to EDIT if they are read only or...
+				- Use a generic OPEN icon and link instead and user doesn't see status until they open it.		
 			- DONE BIG TODO: it would be far nicer if rights to objects were stored in a single JSON fragment that could be easily copied into javascript and c# 
 				- DONE code automatically builds rights collection from json fragment so can use it between both projects and more easily update it in one central spot
 				- DONE Get that working then come back to the rest of the rights in client side