devdocs/todo.txt

@@ -13,7 +13,12 @@
 todo: check attachment NOTES property is actually supported
 	- case https://rockfish.ayanova.com/default.htm#!/rfcaseEdit/2029
 
-//todo: search tables in schema, I think there is a missing index here, need to look at the search query section again as it was changed several times from the original schema creation
+todo: search tables in schema, I think there is a missing index here, need to look at the search query section again as it was changed several times from the original schema creation
+
+todo: Routes should check rights *BEFORE* they fetch the object, not after, all routes affected
+	i.e. delete route instantiates biz object, then it fetchs object from db *then* it checks if they have rights to delete (generically, not specific to that object)
+	This is out of order as it triggers a db call even if they have no rights to do it
+
 
 todo: log failed
 	- Download attempts with wrong key