add access control to alert update resources