diff --git a/src/adldap/ad_interface.cpp b/src/adldap/ad_interface.cpp
index 4fd55476..200008f6 100644
--- a/src/adldap/ad_interface.cpp
+++ b/src/adldap/ad_interface.cpp
@@ -1610,6 +1610,7 @@ void AdInterface::ldap_free() {
 bool AdInterface::gpo_check_perms(const QString &gpo, bool *ok) {
     // NOTE: skip perms check for non-admins, because don't
     // have enough rights to get full sd
+    // TODO: check sd read permissions here and write corresponding error message
     if (!logged_in_as_domain_admin()) {
         return true;
     }