add TODO for up-next tasks - api calls

api/controllers/groupController.js

@@ -21,3 +21,8 @@ exports.add_group = function(req, res) {
         res.json(group);
     });
 };
+
+
+// TODO add user to the group
+
+// TODO clear all users from the group

api/controllers/permissionController.js

@@ -12,3 +12,8 @@ exports.add_group = function(req, res) {
         res.json(group);
     });
 };
+
+
+// TODO add permisson to a user or a group
+
+// TODO clear all permissions directly associated with a user or group

api/controllers/userController.js

@@ -51,4 +51,8 @@ exports.remove_user = function(req, res) {
         }
         res.json({ message: 'User successfully deleted' });
     });
-};
+};
+
+// where should you place this: 
+// TODO for testing if a particular user has a particular permission over a particular object
+// TODO for querying what permissions a particular user has over a particular object