Correctly permission viewing session note files