adds TODOs for user rights management