server/AyaNova/DataList/IAyaDataList.cs

@@ -17,6 +17,8 @@ namespace AyaNova.DataList
         AuthorizationRoles FullListAllowedRoles { get; set; }
 
         //allowed roles to access mini list templated fields
+        //generally this will be *any* because most forms will need to allow this for picklists such as usernames etc
+        // but this is a safety valve for sensitive lists like financial reports where there is just no need for untrusted roles to see it
         AuthorizationRoles MiniListAllowedRoles { get; set; }