Add privileges to the Activity resource

I think it should be `Cannot set notification as read`