Added permission check for user notification page