Update notes for submitted changes

* Access policy editor: adding non-exist user should not display internal server error