fixed bug in accesslevel-directive and added security to running notifications