fixed admin users bypass any access check in add note issue