update notification api

It's an experimental technology and the permission should be checked.