added notification functionality, but need to implement access control