Update notes for submitted changes

* Object write/read ACL and few security testcases