We (intend to) restrict users from modifying notes that are older than a day. We recently started getting a test failure in Controller::Edit::ChangeNote that indicates this check can sometimes fail on the server. On the web site, the user still shouldn't see any UI to change the note, since we have a separate check in the template; but there is a chance that that could be bypassed if the user is crafty enough to submit the request directly.