diff --git a/org.hl7.fhir.utilities/src/main/java/org/hl7/fhir/utilities/http/ManagedWebAccess.java b/org.hl7.fhir.utilities/src/main/java/org/hl7/fhir/utilities/http/ManagedWebAccess.java
index ff7df4e94..a075325a1 100644
--- a/org.hl7.fhir.utilities/src/main/java/org/hl7/fhir/utilities/http/ManagedWebAccess.java
+++ b/org.hl7.fhir.utilities/src/main/java/org/hl7/fhir/utilities/http/ManagedWebAccess.java
@@ -68,6 +68,7 @@ public class ManagedWebAccess {
   }
 
   private static WebAccessPolicy accessPolicy = WebAccessPolicy.DIRECT; // for legacy reasons
+  //TODO get this from fhir settings
   private static List<String> allowedDomains = new ArrayList<>();
   @Getter
   private static IWebAccessor accessor;
diff --git a/org.hl7.fhir.r5/src/test/java/org/hl7/fhir/utilities/http/ManagedWebAccessAuthTests.java b/org.hl7.fhir.utilities/src/test/java/org/hl7/fhir/utilities/http/ManagedWebAccessAuthTests.java
similarity index 97%
rename from org.hl7.fhir.r5/src/test/java/org/hl7/fhir/utilities/http/ManagedWebAccessAuthTests.java
rename to org.hl7.fhir.utilities/src/test/java/org/hl7/fhir/utilities/http/ManagedWebAccessAuthTests.java
index 94f70a3cc..f57d93988 100644
--- a/org.hl7.fhir.r5/src/test/java/org/hl7/fhir/utilities/http/ManagedWebAccessAuthTests.java
+++ b/org.hl7.fhir.utilities/src/test/java/org/hl7/fhir/utilities/http/ManagedWebAccessAuthTests.java
@@ -207,4 +207,10 @@ public void testTokenAuthFromSettings() throws IOException, InterruptedException
       null,
      null, DUMMY_API_KEY);
   }
+
+  @Test
+  public void verifyAllowedPaths() {
+    //TODO the allowed paths cannot be set for now, meaning all will be allowed.
+    ManagedWebAccess.inAllowedPaths("http://www.anywhere.com");
+  }
 }
\ No newline at end of file