diff --git a/docs/refactor-todo.md b/docs/refactor-todo.md
index 91c0fa21..c0329bc2 100644
--- a/docs/refactor-todo.md
+++ b/docs/refactor-todo.md
@@ -9,6 +9,7 @@ queryParams of the piece_list_store should all be reflected in the url and not a
 - Refactor string-templating for api_urls
 - Use classNames plugin instead of if-conditional-classes
 - Instead of using `currentUser && currentUser.email` in an validation that checks whether we user is logged in or now, in the `UserStore` on login we set a boolean property called `isLoggedIn` that can then be used instead of `email`
+- Refactor AclProxy to be a generic hide/show element component. Have it take data input and a validation function to assess whether it should show or hide child elements. Move current Acl checks to another place, eg. acl_utils.js.
 
 # Refactor DONE
 - Refactor forms to generic-declarative form component ✓