Update notes for submitted changes

* Validate the tenant-id of the request