auth.notice when permissions are altered