diff --git a/ayanova/devdocs/todo.txt b/ayanova/devdocs/todo.txt
index 1dde2fbb..b5cc9c34 100644
--- a/ayanova/devdocs/todo.txt
+++ b/ayanova/devdocs/todo.txt
@@ -434,7 +434,11 @@ Subcontractor / tech limited modifications
 
 - Do not send work order items that don't have restricted user scheduled in them and also some other subitems as per below
 - At server have biz rules that prevent changes to fields / objects that are restricted as per below
+- Server Controller workorder* routes add blocking code so can't fetch things they aren't allowed etc 
+	level one blocking
+
 - At client have code to set restricted user restricted fields to read-only or hide as necessary per below
+
 - Remove sections from work order for low rights users as per below
 - Test login as each low rights type and confirm works as planned below