diff --git a/README.md b/README.md
index c340e6720..9c4315a0d 100644
--- a/README.md
+++ b/README.md
@@ -33,7 +33,7 @@ There are currently two demos, which are included in the [racer-examples](https:
 
   * **Persistent storage** – Racer uses [ShareDB](https://github.com/share/sharedb) to keep a journal of all data operations, publish operations to multiple frontend servers, and automatically persist documents. It currently supports MongoDB, and it can be easily adapted to support other document stores.
 
-  * **Access control** – (Under development) Racer will have hooks for access control to protect documents from malicious reads and writes.
+  * **Access control** – Racer itself does not have hooks for access control to protect documents from malicious reads and writes. For adding this functionality, use [sharedb-access](https://github.com/dmapper/sharedb-access).
 
   * **Solr queries** – (Under development) A Solr adapter will support updating Solr indices as data change and queries for realtime updated search results.