--- a/doc/tutorials/advanced/part02_security.rst	Thu Feb 21 18:56:42 2019 +0100
+++ b/doc/tutorials/advanced/part02_security.rst	Thu Feb 21 18:57:05 2019 +0100
@@ -55,10 +55,10 @@
 * add a `visibility` attribute on `Folder`, `File` and `Comment`, which may be one of
   the value explained above
 * add a `may_be_read_by` relation from `Folder`, `File` and `Comment` to `users`,
+  which will define who can see the entity
+* security propagation will be done in hooks
 
-  which will define who can see the entity
 
-* security propagation will be done in hook.
 
 So the first thing to do is to modify my cube's :file:`schema.py` to define those
 relations: