Update notes for submitted changes

* access policy editor: encode group name in the url