diff --git a/server/assignments/schema/mutations.py b/server/assignments/schema/mutations.py
index 9794f4f9..bf2f40f4 100644
--- a/server/assignments/schema/mutations.py
+++ b/server/assignments/schema/mutations.py
@@ -25,6 +25,7 @@ class UpdateAssignment(relay.ClientIDMutation):
         assignment = get_object(Assignment, assignment_data.get('id'))
         student = info.context.user
 
+        # todo: replace with middleware
         if student.read_only:
             raise PermissionError('No valid license')
 
@@ -60,6 +61,7 @@ class UpdateSubmissionFeedback(relay.ClientIDMutation):
         if not user.has_perm('users.can_manage_school_class_content'):
             raise PermissionDenied('Missing permissions')
 
+        # todo: replace with middleware
         if user.read_only:
             raise PermissionError('No valid license')