diff --git a/server/AyaNova/biz/UserBiz.cs b/server/AyaNova/biz/UserBiz.cs
index 03cdb277..b1fd47f1 100644
--- a/server/AyaNova/biz/UserBiz.cs
+++ b/server/AyaNova/biz/UserBiz.cs
@@ -203,6 +203,13 @@ namespace AyaNova.Biz
         //patch
         internal bool Patch(User dbObj, JsonPatchDocument<User> objectPatch, uint concurrencyToken)
         {
+            TODO: turn this into a standard callable method for use with all objects
+            //should accept a list of not changeable properties and not allowed operations with 
+            //a standard version that just works with most objects
+            //Then replicate this to widget and anything else with a patch ability
+            //also this might remove the need for the salt and password trickery below?
+            //Then update all the tests for all patches in integration tests to test for this 
+
             //check for in-valid patches
             if (objectPatch.Operations.Any(m => m.path == "/id"))
             {