Update notes for submitted changes

* Added AccessControl policy