I was concentrating on the security for the user because I was able to get into the window and add a note as 'sa'. But, the error was because the user didn't have access to one of the Extender Windows - the actual window it was using to build the note window.
The solution was going into the security task setup and adding the 'add note' operation.
