Add access checks for notifications events