diff --git a/app/web/db/crud.py b/app/web/db/crud.py
index e70b01c..fa159e8 100644
--- a/app/web/db/crud.py
+++ b/app/web/db/crud.py
@@ -121,6 +121,7 @@ def get_user_group_names(db: Session, email: str) -> list[str]:
     """
     given an email retrieves the user groups from the DB and then the email-domain groups from a global variable, the email does not need to belong to an existing user. 
     """
+    #TODO: the read: [group1, group2] permissions don't currently work
     if not email or not len(email) or "@" not in email: return []
 
     # get user groups
diff --git a/app/worker/main.py b/app/worker/main.py
index b5e74a2..115ea9a 100644
--- a/app/worker/main.py
+++ b/app/worker/main.py
@@ -22,7 +22,7 @@ Redis = get_redis()
 
 USER_GROUPS_FILENAME = settings.USER_GROUPS_FILENAME
 
-# PATCHES for new aa's functionality
+# TODO: these are temporary PATCHES for new aa's functionality
 # logger.add("app/worker/worker_log.log", level="DEBUG") 
 logger.remove = lambda x: print(f"logger.remove({x})")