Update notes for submitted changes

* List all forbidden attributes in the request body.