add read-only association between user and notifications