Could you add the todo to the place, where the permission is defined?