Update notes for submitted changes

* derive the roles from the users hash instead of duplicating data