Improved access checks in notifications config.